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Abstract 



In sequential logic there is an order in which the atomic propositions in an 
expression are evaluated. This order allows the same atomic proposition to 
have different values depending on which atomic propositions have already been 
evaluated. In the sequential propositional logic introduced by Bergstra and 
Ponse in [ ], such valuations are called "reactive" valuations, in contrast to 
"static" valuations as are common in e.g. ordinary propositional logic. There are 
many classes of these reactive valuations e.g., we can define a class of reactive 
valuations such that the value for each atomic proposition remains the same 
until another atomic proposition is evaluated. 

This Master of Logic thesis consists of a study of some of the properties of 
this logic. 

We take a closer look at some of the classes of reactive valuations mentioned 
in [5]. We particularly focus on the relation between the axiomatization and 
the semantics. Consequently, the main part of this thesis focuses on proving 
soundness and completeness. Furthermore, we show that the axioms in the 
provided axiomatizations are independent i.e., there are no redundant axioms 
present. Finally, we show w-completeness for two classes of reactive valuations. 
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1.1 Introduction 

In sentential logic (also called propositional calculus), sentences are build from 
atomic propositions, the constants true and false, and connectives such as ^, 
A, V, etc. The truth of such a sentence with respect to a model, is calculated 
using the interpretation function associated with that model. This function not 
only assigns meaning to the connectives and constants but also to the individual 
atomic propositions. 

In sentential logic the interpretation of connectives and constants is given. 
Hence, a model in sentential logic is uniquely defined by the interpretation of the 
individual atomic propositions. These atomic propositions are assigned either 
the value true or the value false by the interpretation, indicating whether they 
are true or false in the model. Such an assignment is referred to as a valuation. In 
sentential logic, these valuations entirely depend on the atomic propositions they 
assign a value to and not on other external factors. Consequently, a valuation 
will give an atomic proposition the same valuation no matter its location within 
a sentence, and this valuation will never change. These valuations are, in a 
manner of speaking, static. 

This static behaviour can be considered a severe limitation of sentential logic. 
For example, sentential logic is not sufficiently expressive for modelling logical 
conjunction as implemented in most programming languages because the con- 
junction in these cases is non-commutative^. In order for us to effectively model 
these and other kinds of connectives and sequential systems, we are required to 
extend our notion of valuation. 

This thesis is based on the work by Bergstra and Ponse in [5]. They intro- 
duce a logic that uses reactive valuations instead of normal valuations. Reac- 
tive valuations allow us to take previously evaluated atomic propositions into 
account. Thus the valuations are in a sense "reactive". The use of reactive 



^We explain in the next section why this is the case. 
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valuations necessitates the need for expressions in this logic to be evaluated in 
some fixed order. Ifence the resulting logic has a sequential interpretation. The 
same atomic proposition may have a different value depending on which atomic 
propositions have previously been evahiated. The reactive valuations have thus 
an additional dependence on a sequence of atomic propositions representing the 
history of evaluation. 

The signature of this logic consists of a finite set of atomic propositions and 
the constants T and F plus a ternary operator The constants T and 

F denote true and false, respectively. The ternary operator denotes conditional 
composition i.e., an if-then-else operator. For example, a<ib>c translates to if 
b then a else c. This then clues us to the order in which expressions of this type 
are evaluated i.e., the antecedent is evaluated first. The question which of the 
two consequents is then evaluated first is irrelevant because their value depends 
only on the antecedent and not on each other. 

For example, take the expression 

a < a > 6 



The letters a and b represent atomic propositions. The above reads thus if a 
then a else b. In sentential logic, it suffices to know the value of a and b to know 
whether the sentence is true or false, see the following table: 



a 


h 


(I <] a t> b 


F 


F 


F 


F 


T 


T 


T 


F 


T 


T 


T 


T 



However this is not the case if we are using reactive valuations. Keeping the 
if-then-else interpretation in mind, we intuitively begin by evaluating the middle 
a, the antecedent. The act of evaluating this a can possibly have influence on the 
valuation of the left-hand a and the right-hand b. We denote the value of a given 
a valuation H as a/H. Furthermore, the valuation obtained after evaluating a 
is denoted as J^(iJ). So can be viewed as a function that maps reactive 
valuations to other reactive valuations. The value {a<\a\>b) / H is determined by 
the values of a/H, a/-^{H) and b/-^{H), as illustrated in the following table: 



a/H a/UH) b/l{H) 



F 
F 
F 
F 
T 
T 
T 
T 



F 
F 
T 
T 
F 
F 
T 
T 



F 
T 
F 
T 
F 
T 
F 
T 



(a < a > b)/H 



F 
T 
F 
T 
F 
F 
T 
T 



Compared to sentential logic, we have an extra parameter because a/H ^ 
a/-g^{H). Note that it is not possible for the valuation of 6 to influence the 
valuation of either of the a's. Nor is it possible that the left-hand a has influ- 
ence on the valuation of the middle a or the right-hand b. 
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There are other hmitations to reactive vahiations. For example, take the 
expression 6 < a > 6. This has the following truth table: 



a/H hll{H) 



F F 

F T 

T F 

T T 



{b<a>b)/H 



F 
T 
F 
T 



The value of {b<iat>b)/ H is in this case just computed using two values a/H and 
b/-^{H). It is not possible to assign different values to the left-hand b and the 
right-hand b using reactive valuations because reactive valuations do not take 
into account the value of previously observed atomic propositions. Only the 
act of evaluating atomic propositions influences reactive valuations, regardless 
of what those values might have been. 

The class of all reactive valuations is referred to as the free reactive valu- 
ations. We can construct different logics by constraining the type of reactive 
valuations we allow. For example, if we take the class of reactive valuations 
that ignore the seqiiencc of previously evaluated atomic propositions, we get 
the static valuations. Static valuations coincide with the classical valuations in 
sentential logic i.e., they always give the same value for an atomic proposition 
independent of context. 

Another example of a class of reactive valuations are the contractive valua- 
tions. In these valuations the value of an atomic proposition, say a, remains the 
same as long as no atomic proposition other than a is evahiatcd. This is in con- 
trast with the free reactive valuation where each instance of atomic proposition 
a in a sequence of a's can have a different value. For example, if we are using 
free reactive valuations it is possible to assign different values to the a's in the 
expression F <ia\> a. This is not possible if we are using contractive valuations 
because between the first a and the second a no other atomic proposition is 
evaluated, and thus the vahiation of a must remain the same. 

We can formalize the idea of creating new logics using classes of reactive 
valuations. A class K of reactive valuations gives rise to an equivalence relation, 
if-equi valence. Since reactive valuations arc sensitive to the context, this K- 
equivalence is not necessarily congruent i.e., equivalence of a term t need not be 
preserved when substituting equivalent subterms in the term t. For example, for 
every reactive valuation H we have {T<at>T)/H = T/H = T. It is however not 
the case that {b<iT\>F)/ H = {b<i{T<iat>T){>F)/H because in the right-hand term 
the valuation of b depends on a which is not the case in the left-hand term. Since 
congruence is a necessary property, we therefore introduce ii'-congruence as the 
largest congruence contained in iC-equi valence. iC-congruence thus represents 
our semantics. 

Besides a semantical characterization, each logic can be equationally speci- 
fied using a number of axioms. For example, the axiom x<iT>y = x, where x and 
y are arbitrary terms, is an ax;iom shared by every logic we present. Given these 
ax;iomatizations we can prove properties such as soundness and completeness. 

In the rest of this chapter we further motivate why reactive valuations are 
relevant, and discuss some related work. In Chapter 2, a formal introduction 
is given to reactive valuations. In addition, four varieties are introduced and 
discussed. These varieties include the varieties of free, contractive and static 
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valuations we mentioned earlier. This discussion includes proper axiomatiza- 
tions and subsequent proofs of completeness and soundness of these varieties. 
In Chapter 3 a definition of w-completeness is given, and we explain why lj- 
completeness is a nice property of an axiomatization. Subsequently, a proof 
of oj-completeness for the variety of free reactive valuations and the variety of 
static valuations is presented. The axiomatizations given in Chapter 2 might 
contain redundant axioms. In Chapter 4, we show that this is mostly not the 
case. Finally, Chapter 5 contains a summary, and a few suggestions for further 
research. 

1.2 Motivation 

Static valuations, the type of valuations used in sentential logic, are inadequate 
to model many sequential systems. However, we can model those systems using 
different classes of reactive valuations. 

Using reactive valuations we can model non-commutative logical connectives. 
For example, x/' is disjunction in which the right argument is evaluated first 
(notation is taken from [1]). So in the signature of our logic y \s defined 
as T < y > X. In similar fashion x \/ y is defined as T < x t> y. In sentential 
logic these two definitions would coincide. This however is not the case if we 
use reactive valuations i.e., this allows us to distinguish between x \F y and 
X \ y. Hence, reactive valuations are suited for modelling non-commutative 
connectives. One area where non-commutative connectives are commonplace, 
is that of programming languages 

In most programming languages, it is possible that a function, in addition 
to producing a value, also does something else. It might for example raise an 
exception or modify a global variable. This kind of behaviour is called a side- 
effect of said function. Furthermore, it is also possible that the return value of 
a function might depend on some external factor. For example, a database or a 
random number generator. Finally, expressions are evaluated sequentially. This 
means that if want to evaluate x A y, the interpreter has to decide whether to 
evaluate x first or y first. 

Combining these facts, we could get a situation in which the value of the 
expression f{x)f\g{y) depends on whether f[x) is evaluated first or g{y) because 
f{x) might influence the value of g{y), and vice versa. Admittedly it is limited 
to situations that can be translated to boolean formulas, but this is the kind of 
behaviour we can model with reactive valuations and not with sentential logic. 

Short-circuit evaluation is a common feature of programming languages. 
Short-circuit evaluation is usually limited to the evaluation of a few specific 
operators. Using such evaluations only the arguments that have to be evalu- 
ated, are actually evaluated. The operator &&, logical conjunction, in C/C-1--I- 
is an example of a short-circuiting operator. Consider evaluating the expres- 
sion X && y. If X evaluates to false, the second argument y is not evaluated 
because regardless of its value x && y evaluates to false. If x and y do not 
have any side-effects and their values are limited to true and false, this opera- 
tor is commutative. However, in practice it is possible that x and y represent 
some computation that does not necessarily terminate. Consequently, if one 
of the arguments does not terminate, the value of a short-circuiting operator 
like && might be different depending on which argument we decide to evaluate 
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first. Hence, this is another example of a non-commutative connective with a 
symmetric counterpart. 

Arguably the programming language with the most direct connection with 
reactive valuations is Prolog. Prolog is originally designed to model language 
through computational models based on predicate logic. This paradigm of pro- 
gramming in terms of predicate logic is called logic programming. As a result, 
programs in Prolog almost read like logical formulas, and are referred to as 
predicates. In the early days of logic programming, the language did not have 
any instructions with explicit side-effects. However, for Prolog to have some 
practical value extra instructions are needed. For example, the database in- 
structions assert and retract. These instructions can, perhaps not surprisingly, 
assert and retract facts to a Prolog program. Clearly, programs using these 
instructions have side-effects that might influence whether predicates evaluate 
to true or false. For example, predicate P is true if fact A is true. In addition, 
predicate P retracts fact B. Hence, if there is another predicate Q, which is 
true if B is true, and retracts A, the predicates influence each others value by 
their side-effects. 

Staying within the field of computer science, the "reactive behaviour" illus- 
trated by the previous examples does not limit itself to programming languages. 
On the more lower hardware level we have the term "sequential logic" in circuit 
theory. Here sequential logic refers to logic circuits that have a memory. The 
output of such a circuit does not only depend on the input, but also on the 
history of inputs. These circuits can be used to construct finite state machines 
such as Moore and Mealy machines. The output of these machines depends on 
an internal state, which in turn depends on the previous state and input. 

In everyday reasoning, so called common-sense reasoning, the assertion and 
retraction of facts is fairly common. For example, while it may be true that 
Jack is at home in the evening, it certainly does not have to be true that he is 
always at home. In addition, this is not limited to the physical world but can 
also include the beliefs of agents. For example, one might believe that all adult 
swans have white plumage, until one travels to Australia and sees that there 
are swans with black plumage, at which point the beliefs are revised. Ordinary 
classical logic is not equipped to model these reactive processes i.e., the validity 
of propositions remains the same. 

Pragmatics is a subfield of linguistics in which the interaction between ut- 
terances i.e., speech acts, is studied. One example of such interaction is that 
of presupposition. Presupposition refers to implicit assumptions in sentences. 
Take for example the sentence "Jack drives his car to the mall". This sentence 
presupposes that Jack has a car. So modelling presupposition requires we are 
able to deal with side-effects of posing a proposition, another example of reactive 
evaluation. 

In this section we presented a number of processes that might be modelled 
using reactive valuations as motivation why reactive valuations are interesting. 
In the following section most of the aforementioned examples will be examined 
once more except this time in the context of related work i.e., we compare 
existing literature on these subjects with reactive valuations. 
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1.3 Related work 

One of the defining properties of our logic is that the valuation of the atomic 
propositions changes depending on what atomic propositions have been eval- 
uated. In this section we discuss some other logics and formalisms that also 
demonstrate this property. 

As stated earlier in this thesis is based on the work done by Bergstra and 
Ponse in [5]. In it they introduce reactive valuations and the varieties which 
we will study in the next chapters. They discuss a number of topics which will 
not be covered in this thesis. These topics include a method of modelling a 
three- valued logic using reactive valuations, expressivity results, the complexity 
of satisfiability, and a study of the properties of infinite propositions. 

Since reactive valuations are a relatively new invention with no clearly de- 
fined predecessor, there is no related work that deals specifically with reactive 
valuations besides the one by Bergstra and Ponse. There is, however a very 
large body of literature dealing with sequential reasoning. This literature ranges 
from computer science to philosophy and linguistics. An exhaustive literature 
overview is however beyond the scope of this thesis and would in all likeli- 
hood constitute a thesis all on its own. This chapter, therefore, gives a very 
brief overview with a few specific examples, which will hopefully offer a starting 
point for a more detailed account of related work. 

The previous section on motivation already gave a few examples of areas 
where reactive valuations might be applied and hence literature dealing with 
the phenomena described in that section can be considered related to the theory 
of reactive valuations. 

For example we mentioned common-sense reasoning i.e., the type of reason- 
ing we use in our daily lives. Common-sense reasoning has been studied in many 
fields but it has enjoyed renewed attention the past decades with the rise of the 
field of artificial intelligence where it is mostly referred to as non-monotonic 
reasoning. 

In classical logic when a statement (/) logically follows from a set S of premises, 
it is the case that (j) logically follows from a superset 5" 3 5' of premises. Con- 
sequently, we call this logic monotonic. This means that once something is 
true it will remain so. In common-sense reasoning this is not the case. Hence 
this type of reasoning is called non-monotonic. Similarly reactive valuations are 
non-monotonic due to ever-changing valuations. See [17] and [1] for an overview 
of non-monotonic reasoning. 

Similarly in philosophy we have defeasible reasoning which deals with argu- 
ments that might be true but can be refuted at a later point by observing new 
facts, see [10]. 

We can view the evaluation of an expression as the execution of a program. 
The atomic propositions would then correspond to single instructions or pieces of 
programs such as procedures or functions. There are many formalisms that are 
designed for reasoning about propositional properties of programs, e.g. Hoare 
logic, temporal logic of actions and propositional dynamic logic (PDL). 

For example, PDL (see [18] for an overview) can be effectively used to model 
reactive valuations. In PDL we have a set of atomic propositions P, a set of 
basic actions A, a set of states S, and a binary relation R on S. The connec- 
tion between PDL and reactive valuations becomes evident if for every atomic 
proposition in P there is a basic action in A that signifies the evaluation of 
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the respective atomic proposition. Then the states S correspond to the various 
reactive valuations. In that context deterministic PDL i.e., the class of frames 
characterized by (a) (j) — >■ [a] ^, is of particular interest because it illustrates 
one of the limitations of reactive valuations. Namely, that in the previously 
mentioned example b<sat>b the value of both 6's will have to be the same. 

As mentioned in the previous section the programming language Prolog has 
special instructions for the assertion and retraction of facts. Consider the fol- 
lowing Prolog program 

p(a) :- p(b), retract (p (b) ) . 
p(a) :- assert (p(b) ) , fail. 

The statement fail is a reserved keyword that automatically fails i.e., somewhat 
similar to the constant false. When repeatedly asking the interpreter p(a) we 
get the output sequence 0101010101. .. where and 1 stand for no and yes, 
respectively. 

In [ ] the expressive power of the side effects of the assert and retract 
statements in Prolog is investigated. The authors main tool in this analysis 
are these output sequences. Much the same as we consider different varieties 
they consider different classes of output sequences e.g., constant sequences that 
represent programs with no side effect and ultimately periodic sequences where 
the sequence at some point starts to repeat itself. For a complete denotational 
semantics of Prolog, see [lo]. 

Reactive valuations give rise to directed versions of connectives such as A 
and V. In Chapter 2 we define a number of these connectives. The notation for 
these is taken from [ ], where a number of many- valued logics are described. In 
[IC] an axiomatization of Belnap's four-valued logic is given using conditional 
composition, which as you might recall is the only connective in the signature 
of the logic described in this thesis. The notation for conditional composition 
is taken from a paper by Hoare, [ ]. In this paper Hoare describes what we call 
the variety with static valuations. This variety corresponds to boolean algebra, 
as we shall show in Chapter 3. 

In the previous section we briefly mentioned pragmatics, and more specifi- 
cally presupposition. The most commonly used formalism to describe presup- 
position and its effects is discourse representation theory (see [!)]). There are, 
however, different approaches. For example, in [f 1] a many- valued logic with 
directed connectives is used to investigate some of the main problems in pre- 
supposition. 

Besides the ones we just mentioned, there are many other research areas that 
deal with sequentiality that we did not mention here. For example, temporal 
logic, substructural logics and non-commutative logics. As mentioned before 
this section is but a brief overview, and we hope this will prove to be a useful 
point of departure for a more thorough investigation into related work. 

Lastly, it took more than two years to write this thesis. This year a new 
paper on the subject of reactive valuations by Bergstra and Ponse appeared, see 
[4]. The new results in that paper are not discussed here nor do the results in 
this thesis depend on those results. 
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Reactive valuations 



This chapter represents the main body of the thesis. Reactive vahiations are 
formally introduced, which enables us to define a number of different logics. 
Subsequently, some basic properties such as soundness and completeness are 
proven. 

2.1 Introduction 

In this section we introduce a sequential propositional theory starting with the 
language. The symbols of our language are as follows: 

• the constants T and F 

• the ternary operator _<_>_, called conditional composition 

• a finite non-empty set A of atomic propositions 

• an infinite set of variables V 

The notation _<_[>_ for conditional composition was first introduced by Hoare in 
[8]. We use the letters a;, j/, z, u,v,w,. . . to denote the variables, and the letters 
a,b,c, . . . to denote atomic propositions i.e., members of A. Note that A is finite 
and non-empty. These conditions on the set of atomic propositions are relevant 
because they affect the validity of certain theorems, particularly those dealing 
with independence and w-completeness as we shall see in the next chapter. We 
call this signature I]cp(v4). 

The set T(I]c'p(^)) of all terms over signature Y,cp{A) is defined as the 
smallest set such that 

• ACT(I]cp(A)) 
. VCT{^cp{A)) 
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• i < r > s e T(Ecp(^)) with t,r,se T{Y.cp{A)) 

Subsequently, the set T{J^cp{A)) of all closed terms over signature Ec'p(A) is 
defined as the largest subset of T(I](7p(A)) such that no term in T{Y,cp{A)) con- 
tains a variable. The letters t,r,s, . . . are used to denote members of T(Scp(^)) 
whereas we use P,Q,R, . . . to denote closed terms i.e., members of T{T,cp{A)). 

We postpone the discussion of the actual model construction until the next 
two sections. For now it suffices to recall the interpretation we offered in the 
introduction i.e., T and F are interpreted as true and false, respectively, and 
_<_>_ is the if-then-else operator, where the middle argument is the antecedent 
and the left-most and right-most argument are the consequents. 

Using the language we just introduced it is now possible to give the following 
axiomatization: 

(CPl) x<iT>y = X 

(CP2) x<iF\>y = y 

(CP3) T<xt>F = X 

(CP4) x<i{y<iz>u)>v — {x <iy > v) <i z > (x <suc> v) 

We call this set of axioms CP. Hence when t — r, for terms t and r from signature 
Y,cp{A), can be derived from CP, we denote this as 

CP^t=r 



Henceforth we often omit the "CP h" part except when it is not clear from the 
context which set of axioms is used. 

It is also important to note that the equality is in fact a congruence. Conse- 
quently, equality has besides the usual properties of reflexivity, symmetry, and 
transitivity 

(reflexivity) x = x 

(symmetry) x — y ^ y = x 

(transitivity) x — yAy = z^x = z 

also the congruence property, which in this case will have the following form 

, . xi = yi X2 = y2 X3, ^ ys 

congruence) — 

Xi<\X2>X3^yi<y2>y3 



Using this axiomatization and its 
versions of the classical connectives. 

X ^ y — y <lx > F 

X y — X <ly > F 

x^/ y = T < X !> y 

x"^ y = T <yc> X 



intended interpretation, we can define 

X o— ^ y = y <ix>T 

X — y — T <y> ^x 

X o-s-> y =^ y <ix> ^y 

X <->o y = X <iy{> ^x 



where -^x — F<ix>T. The notation of the operators is due to Bergstra, Bethke, 
and Rodenburg in [2] . The circle in the connective indicates the order in which 
the expression is evaluated e.g., cc'V y indicates that we evaluate x before looking 
at y. In the following sections we show that although e.g. ^ and have the 
same interpretation in classical logic, they are not provably equal in CP. Also 
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properties such as idenipotency, commutativity, distribiitivity and absorption 
are not derivable in CP. However, there are some classical properties that are 
derivable in CP. For example we have the following property, 

x<i{F<iyt>T)C'Z = {x < F \> z) < y i> {x <iT > z) 
= z<y\> X 

which implies that 

-.-.a; = F<{F<x>T)>T = T<x>F = x 

Another example is based on De Morgan's laws, 

^{x-^ y) = F<{T<iy\>x)>T 

= {F<T>T)<y>{F<x>T) 
= F <y>-'X 
= —ix < ^y > F 
= -la; /\, -.y 

Using conditional composition, we can create the notion of sequential com- 
position, denoted by o i.e., 

X o y = y <ix> y 

By axiom CP4 it follows that sequential composition is associative, 

x o (jj o z) = (z <iy \> z) <ix t> {z <iy \> z) 
= z<{y<x>y)>z 
= {xoy) o z 

In the following sections we not only give a model for the discussed axiomatiza- 
tion CP but also show that given the provided framework, it is easy to create 
variations on this model. 

2.2 Reactive valuations 

In the classic case a valuation determines the value of all the atomic propositions 
a € A i.e., it assigns either true or false to each atomic proposition. In the case 
of reactive valuations, this assignment can be dependent on atomic propositions 
previously evaluated. In this section we will formally define the notion of reactive 
valuations. 

Let B be the sort of boolean values with constants T and F and RV be a 
sort of reactive valuations. Then for each a e ^ let there be a function 

y^-.RV^B 

This function is called the yield of a and it allows us to look up the value of a 
using a specific reactive valuation. Furthermore, for each a G A there exists a 
function 

^ : RV ^ RV 
aa 
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called the a-clerivativc. With this function wc can capture the dynamic nature 
of reactive valuations i.e., when we evaluate an atomic proposition a the current 
reactive valuation can change. It is important to note that the elements in RV 
do not just encode the value of the individual atomic propositions but also keep 
a history of atomic propositions previously evaluated. It is therefore possible 
that two reactive valuations H and H' assign the same values to each atomic 
proposition but ^(H) ^ §^iH'). 

We define the signature T,jieVai{^) to consist of the sorts B, RV, functions 
Ua and ^ for each a G A, and constants Trv and Fry of sort RV. 

A structure A over T,neVai{A) is called a reactive valuation algebra (RVA) if 
the following axioms are satisfied 

VaiTny) = T 

Va{FRv)=F 

d 

g^{TRv) = TRy 
g^iFRv)=FRy 



for each a G A. So the constants Trv and Fry assign either T to all the atomic 
propositions or F to all the atomic propositions, respectively. Furthermore, 
these two valuations do not change while evaluating an expression. 

The value of a proposition P from signature T,cp{A) according to a reactive 
valuation if in a RVA A is denoted by 

P/H 

This value is determined as follows: for a G A, 

T/H 
F/H 
a/H 

{P<Q>R)/H 

where ^{H) is a generalized notion of the function ^{H), and is defined as 
follows 

d{P<Q>R)' XMl^W) \iQ/H = F 

There are a number of observations to be made here. 

The propositions T and F are always evaluated as true and false, respectively, 
no matter which evaluation wc use. Furthermore, evaluating T and F will not 
change the current valuation. So, it follows that {a<iTt>b)/H = a/H. 



T 
F 

^ ya{H) 

rP/^(ff) iiQ/H = T 

[R/^{H) iiQ/H = F 



2.3 Reactive valuation varieties 
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Also important to note is that in e.g. the proposition a <i (b <T > c) >d the 
values of a and d will not depend on c as c never gets evaluated. 
Finally, let us look at a few examples. 

^U/liH) iia/H = T 
\c/UH) \ia/H = F 



Note that if we know that a/H = T then it docs not necessarily follow that 
a/-^{H) is also true because the valuations H and ^{H) are different. To 
emphasize this point, look at propositions a<a>a and a. Although, it certainly 
is true that in a classical setting these two are equivalent, it immediately follows 
that a valuation H exists such that (a < a > a) /H ^ a/H. 

The following example has instead of a constant or an atomic proposition as 
a condition, another conditional statement. 



{a<i{b<ic\>a){> F)/H 



= < 



"/ d{b<c>a) (^) 
,-^/ a(6<c>a) i^) 

F 



if {b<c>a)/H = T 
if {b<c>a)/H = F 

if c/H = T and b/§-^{H) = T 
if c/H = F and a/§-^{H)=T 
if {b<c>a)/H = F 



if c/H 
if c/H 
otherwise 



Tand b/f^{H) 



Fand a/^(H)=T 



This example illustrates that the value of the leftmost a does not only depend 

on c being evaluated but also on the actual value of c because this determines 
whether either 6 or a (the occurrence of a right next to c in the expression) is 
evaluated which in turn affects the value of the leftmost a. 



2.3 Reactive valuation varieties 

In the previous section we introduced the notion of reactive valuation algebra 
(RVA). In this section we define a number of specific classes of RVAs. Since 
the signature of all RVAs is the same, we refer to these classes as varieties. We 
define the following varieties of RVAs: 

Free reactive valuations This variety of RVAs consist of all possible RVAs. 

So there are no requirements posed on the RVAs in this variety other than 
that they are RVAs. Every other variety will be a subvariety of this one. 

Repetition-proof valuations The variety with repetition-proof valuations con- 
sists of all RVAs that satisfy 

d 
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for all a G A. 

Contractive valuations The variety with contractive valuations is a subvari- 
ety of the variety with repetition-proof valuations i.e., every RVA in this 
variety will also be in the variety with repetition-proof valuations. In 
addition the RVAs here will satisfy 

d d d 
— ( — (a;)) = — (x) 
da da da 

for all a E A. 

Static valuations The RVAs in the variety with static valuations satisfy the 
following equation 

d 

for all a,b E A. 

The definitions of these varieties were taken from [ ]. In Appendix A we define 
and examine an additional variety of our own. 

Given a variety K we say that propositions P and Q are iiT-equivalent, which 
is denoted as 

P Q 

if P/H = Q/H for all RVAs A in the variety K and valuations H E A. Using 
the relation =x we can define a congruence relation over propositions. We say 
that P and Q are ii'-congruent, 

P =K Q 

if =K is the largest congruence contained in =k- 

Given the four varieties we defined earlier we will use the abbreviations /r, 
rp, cr, st for free, repetition-proof, contractive and static varieties, respectively 

Bergstra and Ponse prove the following proposition. 

Proposition 2.1. = j,^C.=,.pC.=^j.C.=gf and ^k^^k for K G {fr,rp,cr} 

The first part of this proposition and the differences between the varieties will 
become apparent in the following sections. The second part is best demonstrated 
using an example. If we take the term F <iac> F then clearly 

{F<a>F)/H ^ F/H 

for all e A and A E K. However, it is not the case that for all varieties K 
the following holds 

{b<{F<ac>F)ob)/H = {b<F>b)/H 

because in the left-hand side the value of b will depend on a but on the right- 
hand side this dependency is gone. This means that although for all varieties K 
we have F <\a\> F =k F, it does not follow that F <a> F ~k F. In the section 
on static valuations, we show that congruence and equivalence do happen to 
coincide for that variety. 

The following proposition clarifies the relationship between congruence and 
equivalence for arbitrary variety K. 



2.4 Notation and conventions 
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Proposition 2.2. If P =k Q and for all A G K and H G A, 



d_ 
dP 



d_ 
dQ 



then 



P=kQ 



Proof Assume P Q and VA e -ftT Vi? e A, ^{H) = §j{H). Since =k 



is defined as the largest congruence contained in =k, P =k Q if for all closed 
terms S and R the following three cases are true: 

(1) P<iS>R=KQ<S>R 

(2) S<iP>R=K S<iQ>R 

(3) S<iR>P=K S<R>Q 

Wc continue by proving these three cases. 



Since P=K Q, it follows that VA e -fC Vil e A, P/H = Q/H. Consequently, 
P/^{H) = Q/^{H). Hence, 



So case (1) is true. Furthermore, the argument for case (3) is symmetric to the 
one give here. So case (3) is also true. 

By assumption we know that P/H — Q/H and -§p{H) = -^{H). Thus, 



In the following sections we will further discuss the varieties wc defined here. 
This discussion will include proper axiomatizations, and proofs of soundness and 
completeness. 

2.4 Notation and conventions 

Before continuing with the in-depth discussion of the varieties, we recap and 
introduce additional notation and conventions. We have encountered the fol- 
lowing equality relations thus far: 




\R/^{H) iiS/H 
{Q<S>R)/H 




[R/^{H) ifQ/ff = F 
{S<iQ>R)/H 



Consequently, case (2) also holds, and P =k Q- 



□ 



16 



Chapter 2. Reactive valuations 



• =K denotes semantic equivalence with respect to variety K . 

• —K is the largest congruence contained in =k- 

• Plain — is used to denote three different types of congruences. The first 
type is provable equality e.g. CP h x<iT>y = x. However we often omit the 
"CP h" part if it is clear from the context which axiomatization we use. 
We also use = in the interpretation of terms given some valuation H e.g. 
{P <\F t> Q) /H — Q/H. Finally we use = for equality between valuations 
e.g. ^(H) = H. Note that no ambiguity arises from these three different 
interpretations because they deal with equality over three distinct classes 
of objects and it will be immediately clear from the arguments or the 
context how = is used. 

Absent from this list is syntactic equality. We therefore introduce the symbol 
— for syntactic equality 

We have the following conventions concerning symbols: 

• The letters a, 6, c, . . . denote atomic propositions. A is the set of all atomic 
propositions. 

• The letters x, y, z, u,v,w, . . . denote variables. V is the set of all variables. 

• The capital letters P,Q,R, . . . denote closed terms. T{T,cp{A)) is the set 
of all closed terms from signature Sc p (A) . 

• The letters t,s,r, . . . denote terms that can possibly, but not necessarily, 
be open. T{T,cp{A)) is the set of all terms. 

2.5 Free reactive valuations 

/r-Congruence is axiomatized by CP. The variety with free reactive valuations 
is the variety on which all other varieties are based. This does not mean that 
there are no limitations. For example if we take the term a < 6 > a it is not 
possible to distinguish between the two a's i.e., we are forced to give them the 
same value no matter what valuation we choose. This limitation can be found 
in the definition of RVA where we define ya ■ RV — > B and g| : RV RV as 
functions instead of relations. 

2.5.1 Soundness 

We have claimed that /r-congruence is axiomatized by CP. We, however, have 
not yet proven that the resulting theory is sound and complete with respect to 
our model. In this section we will show that CP is sound. Soundness of a theory 
with respect to a model means that whatever we derive from the axiomatization 
of the theory is also true in that model. 

Theorem 2.3. For all closed terms P and Q, 



^ Often = is used to denote syntactic equality. However, since = is already used for semantic 
equivalence, we opted to use — in order to avoid confusion. 



CPh P = Q 




2.5 Free reactive valuations 
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Proof. It suffices to show that the four axioms CPl, CP2, CPS and CP4 are 
sound with respect to the variety with free reactive valuations. Let RVA A from 
the variety fr with valuation H G A he given. Then, starting with CPl we 
proceed as follows. 

[Q/wriH) \iT/H = F 
^[p/Mh) -^iT = T 

= P/H 

We use the semantics we defined in the previous sections to evaluate the left- 
hand side of CPl with an arbitrary valuation H, and end up with the right-hand 
side. In addition, observe that we do not pose any requirements on H. Conse- 
quently, the above derivation holds for all RVAs A and H E A. Furthermore, 
we also have the following: 

d rrr. iMwriH)) \iT/H = T 



^> 

Thus, by Proposition 2.2, we have proven that CPl is sound. 

Using the same strategy we prove that axioms CP2, CPS and CP4 are sound. 

\QIMh) iiF/H = F 

^(P/^(H) ifF = T 
\Q/^{H) iiF = F 

= Q/H 

9 iiF/H = T 



diP<F>Q)'"' [i^i^m iiF/H = F 



{T<iPi>F)H={ '^P) ' 

\t iiP/H = T 
~ \f iiP/H = F 

= P/H 
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9 ^^._}wriMH)) iiP/H = T 



d{T<P>Fy ' iiP/H = F 

^{ip{H) i{P/H = T 
ifP/H = F 

Showing that axiom CP4 is sound, is a bit more complicated than the previous 
three axioms because of the number of cases involved. 



fP/ ^,„il,,„, (H) if (Q<iR>S)/H 



= T 
= F 



= < 



P/m^)^^^ ifO/^(ff) = randi?/iJ = r 

P/wdm^^^ if5/4(iJ)=Tandi?/// = F 
i{Q/MH)=F^ndR/H = T 
V/aim-)iH) iiS/^{H) = Fe,ndR/H = F 



r^/^(M(^)) 
p/^iAm 



if Q/^iH) = T and R/H = T 
if S/^(H) = T and R/H = F 
if QI-§j^ {H) = F and R/H = T 
if W 



F and R/H = F 



Since 



{P<Q>V)/ — {H) 



'P/mimW) iiQ/UH)=T 

y/MUH)) if Q/ii{H) = F 



and 



{P<S>V)/ — {H) 



PIUMH)) iiS/^{H)=T 
y/Umm iiS/^{H)=F 



it is possible to e.g. replace P/^{^{H)) if S/-^{H) = T, and V/^{-^{H)) 
if S/^{H) = F by the expression {P < S > V)/^{H). So continuing from 
where we left off, 

^UP<Qt.V)/^{H) \iR/H = T 
\{P^St.V)/^{H) \iR/H = F 

= {{P<iQ>V)<iR>{P<iS>V))/H 



2.5 Free reactive valuations 
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(iTpiMmiH))) a R/H = T and Q/^iH)=T 

d (rr. ^ Mmimim if R/H = T and Q/^{H) = F 

d{P<{Q<R>S)>V)^ ' ifR/H = F^ndS/i,{H)=T 

iwiwsimiH))) ifR/H = F^ndS/i^iH)^F 



d{{P<Q>V)<iR>{P<S\>V))^ ' 
So all axioms are sound with respect to =/r. □ 



2.5.2 Completeness 

In this section we prove completeness. The axiomatization CP is complete 
with respect to the variety with free reactive vahiations, if two closed terms are 
/r-congruent then these terms are also provably equal in CP. 

Before proving completeness we first introduce basic forms, which are a class 
of closed terms. We will show that each closed term is provably equal to a basic 
form. The primary reason for introducing these basic forms is that they will 
greatly simplify most proofs by structural induction on closed terms because 
their structure is less complicated. This will be especially useful in proving 
completeness. 

Definition 2.4. The set of basic forms BF is defined as the smallest set such 
that T,F G BF, and ifP,Q G BF then P<a\>Q G BF for all atomic propositions 
aG A. 

So e.g. f < (a < 6 > c) [> T is not a basic form but (F <i o > T) o 6 > (F < c> T) 
is. Similarly, a is not a basic form but T < a t> is. If conditional composition 
occurs in a basic form, the antecedent is always an atomic proposition. 

An alternative way of looking at basic forms is to view them as labeled 
binary trees i.e., the basic form P <ia>Q corresponds to the tree 



r(P) T{Q) 

where T{P) and T{Q) are the binary trees corresponding to P and Q, respec- 
tively. Hence, the nodes of the tree consist of atomic propositions and the 
leaves of either T or F. This illustrates the simplicity of basic forms because if 
we would try to similarly construct a binary tree for arbitrary closed terms, the 
nodes themselves would have to be trees because the antecedent of conditional 
composition occurring in such a term can itself be an arbitrary closed term. 

As mentioned before we will prove that for each closed term there exists a 
basic form such that they are provably equal to each other. 



Lemma 2.5. For each closed, term P over signature Scrp(^) there exists a term 
P' G BF such that CP^ P = P'. 
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Proof. We proceed by structural induction on P. Suppose P is either T or 
F then P e BF. Suppose P - a for a S A.^ Since P = T < P o P and 
T < P t> F e BF, P' exists. Suppose P is Pi < P2 [> P3. By the induction 
hypothesis there exist terms P{,P2,P3 £ BF such that Pi = P{, P2 = P2, and 
P3 = P3. By congruence, it follows that P = Pi'<P2i>P3. We show by structural 
induction on P2 that P' exists. 

If P^ - T, then P{ <i T > P;^ = P^, and P{ is a basic form. Similarly, if P^ is 
P, then P{ < P > P^ = P^, and P^ e BF. If P^ - P^^ < a t> P^2 for some a <E A 
then 



P{ < (P^i < a > P^2) t> P^ = (P{ < P^i > P;^) < a (P^ <i P^2 > ^3) 
=/ff V <ia>W 



where F, I^ e BF and V = P{<P^ii>P^, W = P{<P22>^3- Clearly, y<ai>VF £ 
BF. □ 

The following lemma is needed in the Lemma 2.7 that shows that syntactic 
equality and /r-congruence coincide. 

Lemma 2.6. For Pi <i a > Pj, Qi < a >Q2 G BF, 

Pl<a>P2=fr Ql<a>Q2 =^ Pi =fr Ql /\ P2 =fr Q2 

Proof. We prove the contraposition. Then either Pi y^fr Qi or P2 Q2 
implies Pi <i a!> P2 j^fr Qi < a> Q2. Assume without loss of generality that 
Pi y^fr Ql- Then the following two cases can be distinguished. 

In the first case. Pi Qi. Consequently, there exists an algebra A and 
valuation H G A such that Pi/H ^ Qi/H. Subsequently, we construct an 
algebra A' D A with valuation H' e A' such that ^{H') = H and ya{.H') = T. 
Then 

(Pi<a>P2) H' = I '^i*^ ' ' 

^ \P2lU^') iia/H' = F 

= Pi/H 

^Qi/H 

= iQi<ia>Q2)/H' 



In the second case. Pi =fr Qi- So the congruence property does not apply 
to Pi and Ql. It follows that there are closed terms S and R such that one of 
the following is the case: 

(1) S<R>Pi S<R>Qi 

(2) Pi<S>R^fr Qi<St>R 

(3) S<Pi>R^fr S<Qi>R 

In each of the three the cases there is an algebra A and valuation H G A such 
that the left-hand side and the right-hand side are not equal using valuation H. 



"^Recall that — is used for syntactic equality. 
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Using this valuation H we know that in case (1) the following applies: 



[Pi/miH) i{R/H = F 
's/MH) iiR/H = T 



= {S<R>Qi)/H 



Consequently, Pi/^{H) ^ Qi/ ^{H). However, this implies that Pi Qi- 

Since wc already assumed that Pi =fr Qi, wc have a contradiction. Hence, case 
(1) cannot occur. Using a similar argument, we can show that this also applies 
to case (2). 

This leaves us with case (3). Let A and H be defined as before. Then, 
similarly to the case where Pi Qi, we construct a new algebra A' 3 A and 
valuation H' e A' such that ^{H') = H and ya{H') = T. Consequently, 

{S<{Pi<iai>P2)>R)/H' = {S<iPi>R)/H 

{S<iQi\>R)/H 
= {S<i{Qi<\a>Q2)>R)/H' 

So the congruence property does not hold for Pi<a> P2 and Qi <a> Q2, and 
thus these terms are not congruent to each other. Pi <a>P2 Qi<a>Q2- □ 

It is perhaps interesting to observe that the other direction of the previous 
lemma follows from congruence i.e., if we know that Pi =fr Qi and P2 =/r Q2 
then Pi <a> P2 =fr Qi <ia>Q2- 

The next lemma shows that syntactic equality and /r-congruence coincide. 

Lemma 2.7. For P,Q & BF, 

P=frQ ^ P-Q 

Proof. The direction from syntactic equality to /r-congruence is trivial. The 
other direction is proven by taking the contraposition and then proceeding by 
structural induction on both P and Q. So assume P ^ Q. We omit the trivial 
cases and the cases that follow by symmetry. 

Suppose P ^ T and Q — Qi < a> Q2 for some a G A. li P =fr Q then 
Poa=frQoahy congruence. However, 

{Poa)/H = {a<T>a)/H 

^(a/^{H) if T/F = T 
\a/^iH) iiTlH = F 



dT 

a/H 



7^ 



^Im-MiH)) if a/H 
(a <i {Qi a X52) > a)/-ff 
iQoa)/H 



T 
F 
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Note that we can always construct an algebra A and H G A such that neither 
^/H = a/^^i£m nor a/H = a/^^{£{H)). 

Suppose P — Pi <3a> P2 and Q — Qi <a> Q2. Then we can assume without 
loss of generality that Pi ^ Qi. By I.H., it follows that Pi Qi- By Lemma 

2.6,P^frQ. 

Of course, if P — Pi < a> P2 and Q ^ Qi < b > Q2, 'Vfc can simply pick an 
algebra A and valuation H E A such that [P o a) / H ^ [Q o a) / H . □ 

Now the stage has been set to prove completeness for not just basic forms 
but for all closed terms. 

Theorem 2.8. For closed terms P and Q, 

P=^^Q =^ CPhP = Q 

Proof. Let P =fr Q- By Lemma 2.5, there exist terms P',Q' G BF such that 
P = P' and Q = Q' . Furthermore, by soundness, it follows that P =yv P' and 
Q =fr Q' , and thus P' —fr Q' ■ Finally, by Lemma 2.7, we get P' — Q' which 
implies that P ~ Q. □ 



2.6 Repetition-proof valuations 

Recall that the variety with repetition-proof valuations is characterized by the 
following equation: 

This restricts the type of valuations we allow in this variety. The consequences 
of introducing this restriction are perhaps best explained using an example. 
Take a look at the following evaluation of the term (6<ia>c)<a>(i using a 
repetition-proof valuation H: 



{{b<ia\>c) <\at>d)/H 




if t/a(i^)-Tand ya{fSH))=T 
if j/„(i/) = Tandy,(|^(i?)) = P 
if ya{H) = F 

if ya{H)^T&nA y,{9.(^H))^T 
if ya{H) = F 



b/faifaiH)) if VaiH) - T and VaifjH)) = T 
^IUUH)) if ya(if)=T and j/,(|^(i/))-P 



F 



{{b<a>e) <a> d) / H 



Observe that since ya{H) = ya{-§^{H)) it follows that the case where ya{F[) = T 
and ya{-§^{H)) = F never occurs. Thus during the evaluation of (&<a>c)<a>(i 
the c is never evaluated, and thus we can replace c with any term we like which 
in this case is another atomic proposition e. However, this does not mean that 
{b <ia> c) <iat> d =rp b <ia> d because the evaluation of b depends on both a's. 



2.6 Repetition-proof valuations 
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Similar to the free reactive valuations, we can define a corresponding axiom- 
atization. In this case, the axiomatization consists of CP plus the following two 
axiom schemas, 

(CPrpl) (x<al>?/)<lal>z = (a;<al>a::)<lal>z 
(CPrp2) a;<a>(?/<iai>z) — x < a t> {z < a > z) 

for all a G A. We call the entire axiomatization CP^p. The axioms CPrpl and 
CPrp2 combined with CP tell us that the value of an atomic proposition a does 
not change unless there is another proposition in between them. 

An example of repetition-proof behaviour can be found in programming. 
For example, an atomic proposition corresponds with a function that updates 
a global variable but its output does not depend on this variable. 

As in the previous section we proceed by proving soundness and complete- 
ness, starting with soundness. 



2.6.1 Soundness 

Theorem 2.9. For dosed terms P and Q, 

CPfp I P ^ Q , 



P rp Q 



Proof. According to Proposition 2.1, we know that =fr'!iL=rp- Since we already 
checked the soundness of the axioms in CP in the proof for soundness of free 
reactive valuations, it suffices to show soundness for CPrpl and CPrp2, starting 
with CPrpl. Let A be a RVA from variety rp and valuation H E A. 



if a/H = T 
if a/H = F 



P/UfaiH)) 

p/failm 

Up<a>P)/l{H) iia/H = T 
[R/liH) if a/H ^F 

{{P<a>P)<a>R)/H 



if 


a/H 


= T 


if 


a/H 


= T 


if 


a/H 


= F 


if 


a/H 


^ T 


if 


a/H 


= T 


if 


a/H 


= F 


if 


a/H 


= T 


if 


a/H 


= T 


if 


a/H 


= F 


if 


a/H 


= T 


if 


a/H 


= T 


if 


a/H 


= F 



a/H ^ F 
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d 



d{{P<ia>Q)<ia>R) 



{H) = 



d 



d{{P<la>P)<a>R) 



if a/H 
if a/H 
if a/H 

if a/H 
if a/i? 

if a/i/ 
if a/H 
if a/i/ 



-Tand a/§-^{H)^T 
= rand a/^iH) = F 
= F 

= T 
= F 

= Tand a/-§-^{H) = T 
= Tand a/^{H)^F 



By Proposition 2.2 CPrpl is sound. Next we show soundness for CPrp2: 



{P<a>{Q<\a>R))/H ^ 



{Q<a>R)/-§-^{H) iiya 



PIUH) 

'p/lw 

'P/liH) 
'P/liH) 



if ya{H) 
if ya{H) 
if ya{H) 

if ya{H) 
if ya{H) 
if ya{H) 

if 

if ya{H) 
if 

if ya{H) 
if 

if 2/a(if) 

if ya 



{H) = T 
{H)^F 

= T 

= Fand y,{l{H))^T 
-Fand y,{^{H)) = F 

= T 

= Fand ya{.H)^T 
= F and 2/a(i?) = F 

= T 

= Fand ya{H)=T 
= Fand ya{H)^F 

= T 

= Fand y,{^{H))^T 
= Fand y,{^{H)) = F 



[iR<a>R)/£{H) ifya 
= {P<ia>{R<\at>R))/H 



{H)^T 
{H) = F 
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if a/H = T 

if a/H = F and a/-§^{H) = T 
if a/H = F and a/^{H) = F 



d{P<ia>{Q<ia>R}) 



So CPrp2 is also sound. 



^(1,(7?)) if a/if 



d{P <a> {R<at> R)) 



T 
F 



□ 



if a/H = T 

if a/H = F and a/-^{H) = T 
if a/H = F and a/-§^{H) = F 



2.6.2 Completeness 

Similar to the previous section we define a set of basic forms for this variety. 
Since we are working with a different variety the set of basic forms needs to 
change. If we were to use the set BF i.e., the set of basic forms as defined in 
the section on free reactive valuations, as the basic forms of this variety then 
syntactic equality and rp-congruence would not coincide. For example, let the 
terms {P <iat> Q) <ia\> R and (P < a > P) < a > i? be in BF and let P ^ Q then 
these terms are rp-congruent but not syntactically equal. So we need to define 
a new set of basic forms. 

Definition 2.10. The set of repetition-proof basic forms is the smallest set 
BFrp such that T,F £ BF^p and if P,Q G BF^p then 

• if P — Pi <\ai> P2 and Q ~ Qi <ia> Q2 then (a o P^) o a i> (a o Q2) E BFrp 

• if P — Pi<ia> P2 and Q =^ Qi < at> Q2 then {a o Pi) < a > Q e BFrp 

• if P =^ Pi < a> P2 and Q — Qi < at> Q2 then P < a > (a o Q2) G BFrp 

• if P ^ Pi<iat> P2 and Q ^ Qi<a\>Q2 then P < a >(5 e BFrp 
for all a E A. 

Clearly, the set BF^p is a subset of BF. The four cases mentioned in the 
definition are based on the axioms CPrpl and CPrp2. 

Lemma 2.11. For each closed term P there exists a term P' G BFrp such that 
CPrp h P^P'. 

Proof. We prove this theorem by structural induction on P. By Lemma 2.5 it 
follows that we can assume without loss of generality that P is a basic form as 
defined in the section on free reactive valuations i.e., P e BF. 

If P is r or P then P e BF,,p. Suppose P is Pi < a > P2. By the induction 
hypothesis, there exist terms P{,P2 G BF^p such that Pi = Pi' and P2 = P2. 
Now suppose that P[ — P'n < a > Pi'2 and P2 — P21 < a > P22. Consequently, 

Pi <i a P2 = Pi' <i a > P2 

(P^i <] a > P'12) < a > (P^i < a l> P^^a) 
= (a o P{^) <i a > (a o P^^) 
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By definition of BF^p we have (a o P{-^) <i a > (a o P22) € BFrp. 

Using similar reasoning we can show that there exists such a term P' G BF^p 
for the remaining three cases: 

• Pi ^ P[i<a> P[2 and - F^^^ < a > 

• P{ - P{i <i a > P{2 and P^ ^ P^i < a > P^2 

• P{ ^ P{^ <: a > P{2 and P^ ^ P^^ a > P^2 

□ 

In the section on free reactive valuations we needed Lemmas 2.6 and 2.7 in 
order to prove completeness. Similarly, we would like to prove these lemmas 
for this variety. However, observe that in the proofs of Lemmas 2.G and 2.7, 
we construct a new valuation algebra based on another algebra. In the variety 
with free reactive valuations this is not a problem, but in this variety we have 
some restrictions on our RVAs, and thus cannot automatically assume that such 
a construction is possible. Therefore, in the proofs of the following two lemmas 
we focus on showing that such an algebra exists. We call an algebra from the 
variety with repetition-proof valuations an rp-algebra. 

Lemma 2.12. For Pi <iat> P2,Qi <ia> Q2 € BFrp, 

Pi < a > P2 ^rp Ql<at>Q2 =^ Pi =rp Ql A P2 =rp Q2 

Proof. We prove the contraposition. We assume without loss of generality that 
Pi i^rp Ql- Then either Pi Qi or Pi =rp Qi- 

Suppose Pi ^rp Ql- Then there exists an rp-algebra A and valuation H (z A 
such that Pi/H ^ Qi/H. We show that Pi/H ^ Qi/H holds whether a/H = T 
or a/H ~ F. Consider the following four cases: 

• Suppose Pi — Pii < a t> P12 and Qi — Qn <i a > Q12- Since Pi < a > 
P2,Qi < a> Q2 G BFrp, it follows by definition of BF^p that Pn — P12 
and Qii — Qi2- Consequently, Pi/H 7^ Qi/H whether ya{H) = T or 

ya{H) = F. 

• Suppose Pi — Pii<ia>Pi2 and Qi ^ Qii<ia>Qi2- By similar reasoning as 
before, we can conclude that Pn — P12. Furthermore, the value of Qi/ H 
does not depend on a/ H . Consequently, a/H can be either T or F. 

• Suppose Pi ^ Pii<a>Pi2 and Qi — Qii<ia>Qi2- Argument is symmetric 
to the previous case. 

• Suppose Pi ^ Pn <i a > P12 and Qi ^ Qn <ia\> Q12- Neither the value of 
Pi/H nor that of Qi/H depends on a/H. Consequently, Pi/H 7^ Qi/H 
is independent of the value of a/H. 

Since Pi/H 7^ Qi/H regardless of whether a/H = T or a/H = F, we can 
assume without loss of generality that a/H = T. We construct an rp-algebra 
A' D A with valuation H' G A' such that J^(iJ') = H. Since A' is an rp-algebra 
we know that ya{x) = ya{^{x)). Hence, it follows that ya{H') = T because if 
this were not the case then ya{-^{H')) = yaiH) — a/H = F which is contrary 
to our assumption. It follows that (Pi <iat> P2)/H' 7^ {Qi < a> Q2)/ H' . 

Suppose Pi =rp Ql. Then the congruence property does not hold i.e., at 
least one of the following three cases is true. 
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(1) S<iRt>Pi^rpS<iRt>Qi 

(2) Pi<iS>R^rpS<Pi>R 

(3) S<iPi>R^rpS<P>R 

for closed terms S and R. Using the same argument as in the proof of Lemma 
2.6, it foUows that cases (1) and (2) cannot occur. So suppose case (3) is true. 
Then there exists an rp-algebra A and valuation H G A such that {S <i Pi t> 
R)/H ^ {S <iQi> R)/H. Using similar reasoning as in the case for Pi Qi, 
we can assume without loss of generality that a/H ~ T. Thus we can construct 
an rp-algebra A' D A and valuation H' e A' such that g^(-ff') = H and 
y^{H) = T. Consequently, {S <i{Pi<iat> P2)i>R) / H' ^ (S <{Qi<at>Q2)> R)/ H' . 
Thus the congruence property does not hold and Pi<a> P2 ^rp Qi<ia>Q2- D 

The following two lemmas have the perhaps odd condition that there are 
at least two atomic propositions. At the end of this section we examine what 
happens if there is only one atomic proposition. Note that by definition there 
is at least one atomic proposition i.e., A is non-empty. 

Lemma 2.13. For \ A\ > 2 and P,Q e BFrp, 

P rp Q P — Q 

Proof. We use the same argument as in the proof of Lemma 2.7. However, in 
the case oi P — T and Q — Qi<\ai>Q2, we claimed that we can always construct 
an algebra A and valuation H such that neither a/H = nor 

a/H = ^ I 'S^^T^i^)) ■ This is not true in this variety. For example, take 
Q1-Q2- T. Then ^(H) = ^{H) ^ H, and by definition of this variety, 
a/H = a/ [H) . We can solve this by instead of taking Poa and Q o a to show 
that P and Q are not congruent, we take Pob and Qob where the existence of h is 
guaranteed by the assumption that |A| > 2. Since it is possible to construct an 
algebra and corresponding valuation H such that neither b/H — 

norb/H = b/£i^^iH)). " ' □ 

The argument for completeness is exactly the same as in the previous section, 
except that we use the lemmas proven in this section. 

Theorem 2.14. // |yl| > 2 then for closed terms P and Q, 

P — rp Q CPj-p I P — (c^ 

Look at the following proposition to understand what happens when there 
is only one atomic proposition i.e., \A\ = 1. 

Proposition 2.15. // \ A\ = 1 then for all P, Q and for all A e rp, H £ A, 

Proof. Proof by induction on P. If P is either T or then P/^{H) = P/H 
follows immediately. 
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Suppose P — a then we proceed by induction on Q. If Q is either T or F 
then it is trivial, li Q — a then 

= ya(H) 

= P/H 

U Q - Qi<Q2>Q3 then 

'diQ,<Q2>Q3r ' l«/z4(z4W) ifQ2/i/-^^ 

\ljiy{H) ifQ,/H = T 



= IH 



dQ: 

I a 

OQ: 

-IH a/H 



a/^m iiQ2/H = F 



Hence, a/-^{H) = a/H for all Q and H. 
Suppose P - Pi<P2>P3. Then 



{P^<iP.^t.p^)/ — {H) = 



\P3/Aii,m ifP2/i,{H)^F 



-IH 



—IH 



'Pi/{H) \iP2/H^T 
P^/iH) \iP2lH = F 

iiP2lH = T 
P^/AiH) iiP2/H = F 



□ 



aP2 

= (Pi <J P2 > P3)/H 

This proposition implies for example that 

(T<ia\>a) H ^ I / ' 

jr iialH = T 
~\a/H iia/H = F 

= a/H 

In fact, Proposition 2.15 implies that for \A\ = 1 we lose any kind of reactive 
behaviour, and we end up with static valuations. Furthermore, this proposition 
is clearly true for every variety in which all valuations are repetition-proof i.e., 
where ya{H) = ya{-§^{H)) is true. Hence, we have the following corollary. 

Corollary 2.16. // \A\ = 1 and the valuations in variety K satisfy the equation 
ya{x) = ya{^{x)) then 

P Q •^=^ P =st Q 

for all closed terms P and Q. 
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This result will also be helpful in establishing completeness for the variety 
with contractive valuations. 



2.7 Contractive valuations 

Recall that the variety with contractive valuations is characterized by the fol- 
lowing two equations: 

d 

ya{x) = ya{-Q^(x)) 

The first equation should be familiar since we encountered it in the previous 
section in the characterization of repetition-proof valuations. The second equa- 
tion tells us that valuations remain constant through multiple a-derivatives. 
Consider the following example, 



{{b<ia>c) <iat>d)/H = 



{b<ia>c)/-^{H) iialH = T 
d/l{H) " ifa/H = F 

'WfaifaiH)) if a/ff-T and a/ J|(ff)=T 

^d/fjH) iia/H = F 

'b/£iH) iia/H = Tanda/i^{H)^T 
if a/H = T and a/-§^{H) = F 
if a/H = F 



^\b/l{H) \ia/H = T 
\d/l{H) if a/H ^F 

^{b<iat>d)/H 

In the first two steps we expand the expression using the standard free reactive 
semantics. In the third step we replace with ■§^{H) using the defini- 

tion of contractive valuations. Similarly, as in the example given in the section 
on repetition valuations we can eliminate the case where the example is equal 
to c/^(H) because a/H must be equal to a/-^{H). 

By looking at the definition it becomes immediately apparent that the variety 
with contractive valuations is a subvariety of the variety with repetition-proof 
valuations i.e., if P =rp Q then P =„ Q, and similarly if P =rp Q then 
P =cr Q- Of course both varieties are subvarieties of the variety with free 
reactive valuations. This relation between the different varieties was previously 
also stated in Proposition 2.1. 

cr-Congruence is axiomatized by CP and the following axiom schemas. 

(CPcrl) {x<iat>y)<ia>z = x<iat>z 
(CPcr2) x<at>{y<ia>z) — x <iat> z 
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The entire axiomatization is called CPcr- The axioms of CPcrl and CPcr2 allow 
us to eliminate consecutive atomic propositions in our terms. So for example 
the terms a o P and a o a o P are provably equal. This is of course a stronger 
version of what we have seen in the previous section, which should not come as 
a surprise considering that this variety is defined in terms of the repetition-proof 
variety. 

The following two sections show soundness and completeness for this variety. 



2.7.1 Soundness 

Theorem 2.17. For closed terms P and Q, 



P 



Q 



Proof. Since the variety with contractive valuations is a subvariety of the variety 
with free reactive valuations it suffices to show soundness for CPcrl and CPcr2. 
Let algebra A and valuation iJ g A be given. 



{{P<ia>Q)<ia>R)/H = 



\p<ia>Q)/£iH) iia/H = T 
R/liH) iia/H^F 

'P/lMiH)) ifa/H = Tauda/l{H)-. 
Q/UUh)) ifa/H = Tanda/i^{H)-. 
R/l{H) iia/H = F 

'Pli.iiliH)) if a/if = T and a/if = r 



T 
F 



{p/Uh) ^ia/H = T 
{P<iat>R)/H 



if a/H = T and a/H = F 
if a/H = F 

if a/H ^ T 
if a/H = F 



d 



-ililm) ifa/H = Tanda/liH)=T 



dP 



iH) = <^{l{lm) iia/H = T^nda/£{H) 



d{{P<ia>Q)<ia>R) 

'. OR 



iia/H = F 



MlW) ita/H = T 
miliH)) it a/H ^F 



F 



d{P<aoR) 

By Proposition 2.2, CPcrl is sound. The proof of soundness for CPcr2 is similar 
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to that of CPcrl. 



{P4at>{Q<ia\>R))/H 



P/l{H) iia/H = T 

{Q<a>R)/^{H) if a/if = F 

'P/l{H) iiya{H) = T 

Q/UUH)) ita/H = Fe.nda/l{H)=T 

[R/UUH)) ifa/H = F and a/ 1{H)=F 

P/-§^{H) iiya{H)=T 

Q/ii£(H)) iia/H = F and a/H = T 

R/UlaW) if a/H = F and a/H = F 

[PlliH) if a/H = T 

[R/lilm if a/H = F 

(P/l{H) if a/H = T 
\r/1{H) if a/H = F 

{P<at>R)/H 



d 



d{P<a>{Q<at>R)) 



iH)={ 



Hence, CPcr2 is sound. 



wilm if a/H : 

^Aifailm) if a/H : 

\MUH)) ifa/H = T 
" ilm if a/H = F 



,dR\da 

d 



T 

Fanda/liH) 
F and a/ -l-iH) 



T 
F 



d{P<ia> R) 



□ 



2.7.2 Completeness 

As we are working witli a new variety we are required to define a new set of 
basic forms. Otherwise syntactic equality and cr-congruence will not coincide. 

Definition 2.18. The set of contractive basic forms is the smallest set BF^r 

such that T.F £ BFcr and if P,Q e BFcr then for all a £ A 

• if P ^ Pi<a> P2 and Q ^ Qi<iat>Q2 then Pi < o > Q2 e BFcr 

• if P ^ Pi<a> P2 and Q ^ Qi < a i> Q2 then Pi<a>Q e BFcr 

• P ^ Pi <] a > P2 and Q ^ Qi<a>Q2 then P<a>Q2 e BFcr 

• if P Pi<a> P2 and Q ^ Qi < a i> Q2 then P<a>Q G BFcr 

This definition differs from the one for repetition-proof basic forms. For 

example, {T<at>T)<iat>F is a valid repetition-proof basic form but it is not a 
contractive basic form. In fact, BFcr is a subset of BFrr,. 
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Proposition 2.19. BFcr C BFrp 

Proof. Let P S BFcr- Then by structural induction on P wc show that P £ 
BFrp. li P e {T,F}, it follow immediately that P e BF^p. 

Suppose P — Pi < at> P2. By definition, Pi,P2 G BFc^- Hence, by I.H., 
it follows that Pi,P2 £ BF^p. By definition of contractive basic forms, Pi ^ 
Pii<at> P12 and P2 ^ P2i<ia> P22. Consequently, Pi<iat> P2 E BF^p. □ 

The following lemma shows that the set BFc,- is indeed the set of basic forms 
we want. 

Lemma 2.20. For each closed term P there exists a term P' G BFcr such that 
CPcr ^ P = P'. 

Proof. By structural induction on P. We can assume that P £ BF because 
Lemma 2.5 is applicable. 

If P is T or F then P e BFcr. Suppose P is Pi < at> P2. By the induction 
hypothesis, there exists terms P[,P2 G BFcr such that h Pi = P{ and \- P2 — 
Pj. Now suppose that P[ — P[i <ia> P{2 and P2 — P21 <ia> P22. Consequently, 

Pi < a t> P2 = P{ <i a P2 

= (Pi'i < a > Pi'2) < a > (P^i <] a > P^a) 
= Pi'i < a > P22 

By definition of BFcr we have P^i < a > P22 G BFcr. 

Using similar reasoning we can show that there exists such a term P' G BFcr 
for the remaining three cases: 

• P{ ^ P{i<at> P'12 and P^ - P^^ < a > P^j 

• P{ - P{^ <: a > P{2 and P^ ^ P^i < a > P^2 

• P{ ^ P{^ <: a > P{2 and P^ ^ P^i < a > P^2 

□ 

The following two lemmas are needed for proving completeness for all closed 
terms. 

Lemma 2.21. For Pi < a i> P2, Qi < a > Q2 € BF^r, 

Pl<a> P2 =cr Ql<at>Q2 =^ Pi =cr Ql A P2 =cr Q2 

Proof. We use a similar proof as the one for Lemma 2.6. Note that the problems 
that occurred in the variety with repetition-proof valuations from having either 
Pi — Pii<iai>Pi2 or Ql — Qii<iat>Qi2 cannot occur here by construction of the 
contractive basic forms i.e., if either Pi or Qi are syntactically equal to those 
terms then Pi < a > P2, Qi o a > (52 G BFcr would not be true. □ 

Lemma 2.22. For \A\ > 2 and P,Q e BF^r, 

Proof. We use a similar proof as the one for Lemma 2.13. □ 
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Similar to the previous varieties, now tliat we have proven these lemmas, 
completeness for all closed terms follows. 

Theorem 2.23. // |yl| > 2 then for closed terms P and Q, 

P Q CPcr I P ~ Q 

By definition there is at least on atomic proposition. In the section on 
repetition-proof valuation we proved Corollary 2.16. Clearly, this corollary also 
applies for this variety because ya{H) = ya{-§^{H)) is also true in this variety. 
Hence, if \A\ = 1, contractive congruence =cr coincides with static congruence 

= st- 



2.8 Static valuations 

Static valuations correspond with classical prepositional logic. As such the value 
of atomic propositions does not depend on other atomic propositions. 

st-Congruence is axiomatized by CP and the following two axioms, due to 
Hoare in [' ]: 

(CPstat) {x <iy\> z) <\u> V = {x <u'> v) <y'> [z <iu\> v) 
(CPcontr) {x<iy\>z)<iy\>u^x<iy>u 

The first axiom CPstat tells us that the value of atomic propositions remain the 
same despite their relative position in the term. The second axiom CPcontr is 
a generalization of the axioms for contractive valuations in the previous section 
i.e., this axiom allows contraction of not only atomic propositions but also for 
terms in general. We call the axiomatization of si-congruence CPst. 

The symmetric versions of the aforementioned axioms, listed below, follow 
from CPs*. 

(CPstat') X <iy t' {z <iu^ v) = [x <\yi> z) ^ui' [x <y>v) 
(CPcontr') X <iy > {z <iy^ u) = x <iy t> u 

The key in deriving CPstat' and CPcontr' is the equality y<x>z = z<i(F<x>T)>y 
which we proved in the free reactive valuation section. For example, 

x <i y > (z <s u > v) — X <i {F < (F <i y > T) > T) > (z < u > v) 
= {z <iu> v) <i (F <iy t>T) > X 
= (z < {F <y t>T) t> x) <iu> {v < {F <iy t>T) > x) 
= {x <y t> z) <uc> {x <y > v) 

One can prove CPcontr' using the same technique. 

Looking at the axiomatization it might not be immediately clear that this 
variety corresponds to classical prepositional logic. One of the major differences 
between classical propositional logic and the varieties we have studied in the 
previous sections is the fact that the values of atomic propositions in a given 
term do not change depending on where they occur in the term. The following 
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equality illustrates that the variety with static valuations also has this property. 



So appending an arbitrary term before x will not change the value of x. In the 
next subsection we will prove its semantical counterpart. 

In the following subsections we show soundness and completeness for the 
static valuations, and examine the relation between static valuations and boolean 
algebras. 

2.8.1 Soundness 

In contrast to the previous sections wc; cannot immediately start proving sound- 
ness but first need the following lemma which will not only be useful for proving 
soundness for this variety but also provides some additional insight to the corre- 
spondence between this logic and classical logic. It is worth noting that although 
this lemma can be viewed as a generalization of the way this variety is defined 
ya(^a;) = ya{x), it in fact follows from the definition. 

Lemma 2.24. For all P, Q and for all A G st, H G A, 



Proof. Proof by structural induction on P. If P ^ T or P ^ F then P/-^{H) = 
P/H is trivially true. 

Suppose P — a for a £ A. Then proceed by induction on Q. If Q — T or 
Q^F then a/^{H) = a/H is trivially true. If Q ^ 6 for 6 e A. Then 



a; = (a;<iyi>2:)<]Pi>a; 
= {x <i F > x) <yt> [z < F > x) 



= x<y>x 



= yox 




P/H 



VaiH) 




Suppose Q — Qi<iQ2>Q3- Then 




dQi <Q2>Qs 



d 




(a/^^{H) \iQ2/H = T 
\a/^^{H) iiQ2/H = F 
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This concludes the case for P — a. 
Suppose P - Pi<iP2\> Ps- Then 



-'"\p,/^{H) \iP2/H = F 



-IH 



Pi/H if P2/H = T 
P3/H ifP2/H = F 

= {Pi<P2t>P3)/H 

□ 

The previous lemma shows that the valuation of terms is independent of 
the context in which they appear. It is directly related to the equality x ~ 
y o X which we derived in the introduction to this section, in that it similarly 
illustrates that the value of the atomic propositions is not dependent on what 
other atomic propositions might have occurred during the valuation of a term, 
and consequently it cannot change during the valuation. 

In the previously observed varieties there is a clear distinction between equiv- 
alence and congruence. This difference was proven by using the example where 
aoT =K T but aoT T ioi K & {fr, rp, cr} because aoT ob b. How- 
ever, as the previous lemma shows we cannot apply this example for the static 
valuations. In fact the following lemma shows that in this variety equivalence 
and congruence coincide. 

Lemma 2.25. For closed terms P and Q, 

P =st Q •^^=^ P ~st Q 

Proof. Congruence is by definition an equivalence. So it will suffice to show 
that the equivalence =st also has the congruence property. Suppose Pi =st Qi, 
P2 =st Q2, and P3 =st Qs- Then 



(Pi <P2> P3)/H = 



Pi/S-^H) iiP2/H = T 
Pz/t^^H) iiP2/H = F 

{Pi/H iiP2/H = T 
~* [P^/H iiP2/H = F 

^{Qi/H ilQ2/H = T 
^{Qt^/H iiQ2/H = F 

*lQ3/g|^(i?) ifQ2/H = F 
= iQi<Q2>Q3)/H 
At both the *-marked steps in the derivation we apply Lemma 2.24. □ 
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Note that the application of Lemma 2.24 in the previous proof is neces- 
sary because otherwise Pi/j^{H) and Psf-r^^H) can only be replaced by 
Qi/ -?^{H) and Q^/ --^{H) at which point the expression cannot be further 
reduced. So this line of reasoning will not work for the other varieties where we 
do not have this lemma. 

Now that we have proven these lemmas, soundness is relatively easy. 



Theorem 2.26. For closed terms P and Q, 



CP St ^P = Q 



P 



Q 



Proof. By Lemma 2.25, we only need to show that 



CP,t h P = Q 



It suffices to show soundness for only CPstat and CPcontr. Take note of the 
frequent use of Lemma 2.24 in the derivations below. 



{{P<iQ>R)<iS>V)/H =^ 



{P^Q>R)/^{H) 



OS 



if S/H = 
if S/H = 
if S/H = 

if Q/H 
if Q/H 
if Q/H 
if Q/H 



y/UmiH)) 




if S/H = T 
if S/H = F 



if S/H = T and Q/^{H) = T 
if S/H = T and Q/^{H) = F 
if S/H = F 

: T and Q/H = T 
: T and Q/H = F 

: F 

= T and S/H = T 
= T and S/H ^ F 
= F and S/H = T 
= F and S/H = F 

a Q/H and S/-^{H) 
liQ/H 'And S/£q{H) 
a Q/H ^ F and S/^{H) 
if Q/H ^ F and S/^iH) = F 



T 
F 

: T 



^Up<S>V)/^{H) it Q/H 

\{R<St>V)/^{H) liQ/H^F 
= {{P < S >V) <iQ ^ {R<i S >V)) / H 
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{{P-iQ>R)<iQ>S)/H ■ 



{P<Q>R)/^{H) 

'pli 



if Q/H = T 
if Q/H = F 



dQ 



ifQ/ff = Tand Q/^{H) 



= < 



dQ 
d 

dQ 



d 

dQ 



P/ 

P-l-^Q^mW) 



\PIUUH)) 



'P/^H) 



if Q/H 
if Q/H 

if Q/H : 
if Q/H 
if Q/H 

if Q/H -- 
if Q/H -- 

if Q/H = T 
if Q/H = F 



Tand Q/^{H) 
F 



T 
F 



-- T and Q/H 
■■ T and Q/H 
■- F 

T 
F 



T 
F 



= {P<3Q>S)/H 

Thus CPstat and CPcontr arc sound. Soundness of the rest of the axioms follows 
by the soundness of the variety with free reactive valuations. □ 

2.8.2 Completeness 

Proving completeness follows the same strategy as we have seen before i.e., we 
define basic forms, and prove completeness for the basic forms. However, the 
individual lemmas will differ significantly from what we have seen up to this 
point because the construction of the static basic forms is more complicated. 

In order to define the static basic forms, we first need to enumerate the 
members of A: 

ai,a2, ■ ■ ■ ,an 

Recall that a basic form i.e., a member of BF, corresponds to a labeled binary 

tree. A static basic form is a member of BF, and is a full binary tree with n + 1 
levels. At level i only atomic proposition ai occurs, and at level n + 1 at each 
leaf there is either a T or F. The resulting tree is pictured below: 





T/F T/F 

So an atomic proposition ai occurs 2'~^ times and there are 2" leaves. The set 
of static basic forms is called BF^^. 

The following two lemmas are needed to prove that there exists a static basic 
form for each closed term. 
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Lemma 2.27. For P,Re BFgt and Ui € A, there exists a term Q G BF^t such 
that 

CPst ^ P<ai\>R = Q 

Proof. We proceed by induction on tlie number of atomic propositions. Note 
that since P, R e BFsj it follows that P ^ Pi <l ai > P2 and P ^ Pi <l ai > P2 
withPi,P2,Pi,P2eBF,t. 
If \A\ = 1 then = ai, and 

P <iaii> R= (Pi <iait> P2) <\ait> (Pi < ai > P2) 
=* Pi <i ai t> P2 

(*) is obtained by applying CPcontr. Since Pi < ai [> P2 is a static basic form, 
we have shown the existence of Q. 

Suppose 1^1 = n+1 and i > 2 (if i = 1 apply CPcontr and CPcontr'). Then 

P < a, P = (Pi ai [> P2) <iai> (Pi < ai > P2) 

= (Pi <ai> (Pi < oi P2)) < ai > (P2 < a, > (Pi < ai > P2)) 

Next take the left consequent, 

Pi <l flj (Pi < ai t> P2) = (Pi <i fli > Pi ) < ai > (Pi < a, l> P2) 
=iH Qi <iai>Q2 

where Qi = Pi <ai> Ri, Q2 = Pi < > P, and both Qi and Q2 are static basic 
forms given the set of atomic propositions A \ {ai} (but otherwise the same 
enumeration). Note that since |j4\{ai}| = n, we could use the I.H. in the above 
derivation. 

We can apply the same argument for the right consequent P2<]ai[>(Pi<iaii>P2) 
and obtain Q2 and Qs such that they are static basic forms for this set, and 
<33 = -P2 o «i i> Ri and Qi = P2 < > P2. Consequently, 

P < a, t> P = {Qi < ai t> Q2) <a\\> {Q3 <ai> Q4) 
= Qi<iai>Q4 

Clearly, the term Qi <i ai i> Q4 is a static basic form for the set A. □ 

The rest of this section resembles the previous sections. So we start by 
showing that there is a static basic form for each closed term. 

Theorem 2.28. For each term closed term P there exists a P' G BF^t such 
that 

CPst ^P = P' 

Proof. By structural induction on P. Since we already know that there exists a 

provably equal basic form for each closed term P (as opposed to a static basic 
form), we can assume P is a basic form. If P e {T, F} then simply construct a 
static basic forms where all the leaves are either T or F. Suppose P — Pi<a\>P2. 
By I.H. there exist P{, P2 G BF^t such that Pi = P[ and P2 = P^. Then by the 
previous lemma we know P' exists. □ 



2.8 Static valuations 
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Next wc show that for static basic forms the congruence =st coincides with 
syntactic equahty. 

Lemma 2.29. For static basic forms P and Q, 

P=stQ ^ P-Q 

Proof. Since one direction is trivial, it suffices to prove that P =st Q implies 
P — Q. Assume P ^ Q for static basic forms P and Q. By definition of static 
basic forms, it follows that there is at least one leaf that differs in value for P 
and Q. For example the leftmost leaf for P has value T and the leftmost leaf 
for Q has value F. It is then trivial to construct a static valuation H such 
that P/H ^ Q/H. In the example we just mentioned this valuation would 
assign true to all atomic propositions. Since there is a valuation H such that 
P/H ^ Q/H, it follows that P ^^t Q- Hence, P i-^t Q- □ 

Using the same reasoning as in the previous sections we obtain completeness 
for all closed terms. 

Theorem 2.30. For closed terms P and Q, 



P=stQ 



CPst hP = Q 
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cj- Completeness 



In this chapter we discuss w-completeness of the different axiomatizations we 
encountered thus far. The following definition of w-completeness is taken from 



Definition 3.1. An axiomatization £ over a signature E is uj-complete if an 
equation s = t with s,t Cz T(S) can be derived from £ if a{s) — a{t) can be 
derived from £ for all closed substitutions a. 

The set T(I]) is the set of all terms over signature E. w-Completeness is also 
know as inductive completeness since we do not need an additional induction 
theorem to prove that s = t can be derived if cr{s) = a{t) can be derived for all 
closed substitutions a. 

An example of an axiomatization that is not w-complete is the following 
axiomatization of the natural numbers with addition and multiplication, taken 
from [::>]: 



In this axiomatization every closed instance of e.g., x + y = y + x can be derived. 
However, the theorem itself cannot be derived from the above axioms. 
See [12] for a more thorough introduction to w-completeness. 

3.1 cj- Completeness of CP 

We begin with proving w-completeness for CP. First, however, it is necessary to 
distinguish between a few unique cases based on the number of elements in the 
set A of atomic propositions. As it turns out CP is not w-complete for \A\ < 2. 



x + 
x + S{y) 
X ■ 



X 



S{x + y) 


x + {x-y) 



X ■ S{y) 
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If the set A is empty, and there are no atomic propositions, it follows that 
every closed closed substitution cr replaces the variables by terms build up from 
T, F and _<_>_. Using axioms CPl and CP2, this is the same as replacing 
the variables by either T or F. If we now consider the equation x o T = T, we 
see that for every closed substitution cr, a{x oT) = ct(T) follows from CPl and 
CP2. However, x oT = T cannot be derived from CP. If it could be derived 
then it could also be derived in the case where A ^ % because the derivations 
are independent of the number of atomic propositions in A. So if this is the 
case then by soundness a o T =fr which is clearly not true. 

Similarly, when there is only one atomic proposition i.e., A — {a}, we take 
the equation xo aoT — aoxoT. For every closed substitution cr, a{xo aoT) — 
a{a o X o T), where we can assume without loss of generality that cr replaces 
variables either by T, or a sequence of a's i.e., a o a o . . . o a. However, 
CP!f^ xoaoT ^aoxoT. 

Therefore, in the remainder of the discussion of oj-completeness for CP, we 
assume that A has at least two atomic propositions, usually referred to as a and 
b. 

Similar to the sections where we showed completeness for the various vari- 
eties, we define a set of basic forms. However, this time the basic forms can also 
be open terms. 

Definition 3.2. Let the set of open basic forms T be the smallest set such that 
T, F (z T. and if s,t €T then s <a>t €T for all a G A and s <x >t € T for all 

xeV. 

The set V is the set of variables. The terminology "open basic form" is a 
bit misleading because an open basic form can possibly be a closed term. This 
definition differs from the one for the set of closed basic forms BF in that terms 
of the form s <ixc>t are also included. In addition, observe that if we substitute 
all the variables by atomic propositions in an arbitrary open basic form, the 
resulting term will be a member of BF. 

Lemma 3.3. For all terms t there exists an open basic form t' such that CP h 
t^t'. 

Proof. Proof by structural induction, very similar to the proof of Theorem 2.5. 

□ 

The following lemma tells us that when dealing with open basic forms, it 
suffices to use closed substitutions that map variables to atomic propositions 
instead of arbitrary closed terms. 

Lemma 3.4. For open basic forms s and t, if for all closed substitutions a : 

cr(s) a(t) 

Then for all closed substitutions a : V ^ T(S(7p(A)), 

cr(s) ^fr a{t) 

^Note that with the notation a : V ^ A we do not imply that this substitution only works 
on variables but that the substitution replaces the variables in a term with members of A. 



3.1 w-Completeness of CP 
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Proof. Assume there exists a closed substitution a : V ^ T{'Ecp{A)) such that 
cr(s) (j(t) for open basic forms s and t. We prove by induction on s and t 
that there exists a closed substitution t : V ^ A such that t(s) T{t). We 
omit the cases where both s and t are closed terms, which arc trivial, and the 
cases that follow by symmetry. 

Suppose s € {T, F} and t — ti<sx>t2 or t — ti<ia>t2. Let t be the substitution 
that maps all variables to atomic proposition a. Then T(s),T(t) e BF, and 
clearly r(s) ^ T{t). By Lemma 2.7, r(s) T{t). 

Suppose s ~ si < a > S2 and t — ii <i 6 > ^2- Then it is trivial to see that no 
matter what closed substitution t : V ^ A we choose, t(s) T{t). Similarly, 
we can reduce the case where s — si <i x > S2 and t — ti < y > t2, to this case 
by letting t{x) = a and T{y) — b. Furthermore, the same argument can be 
used when one of the terms starts with a variable and the other with an atomic 
proposition. 

Suppose s — si<xc>S2 and t — ti<ix>t2. Since (t(s) can assume 

without loss of generality that (t(si) (j{ti). By the induction hypothesis, it 
follows that there exists a closed substitution t : V A such that t(si) 
T{ti). Consequently, by Lemma 2.6, T{t) t{s). We can use the same 

argument for s — si <i a t> S2 and t — ti <ia>t2. □ 

Note that this lemma is trivially true when A = 0. The above lemma cannot 
be proven for \A\ — 1. Take for example, 

s = {T <ix> F) <ia> {T <x> F) 
t = {T < a> F) < X > {T < a> F) 

where we assume that A — {a}. Then the only closed substitution t : V ^ A is 
the one that maps all variables to a. Hence r(s) — T(t), and thus t(s) —fr T{t). 
However, if we pick closed substitution cr : y — > T{J^cp{A)) such that (j{x) = F, 
then clearly (t(s) y^fr 

Lemma 3.5. For open basic forms s and t, if for all closed substitutions a, 
a{s) =fr (j{t) then s — t. 

Proof. We prove the contraposition i.e., given that s ^ t we show that there 
exists a closed substitution a such that a{s) cr{t). Note that if s and t 
are closed terms then s, t G BF, the set of closed basic forms. Since we already 
showed in Lemma 2.7 that for terms in BF /r-congruence and syntactical equal- 
ity coincide, we are done. We proceed by induction on s and omitting the 
cases that follow by symmetry. 

Suppose one of the following cases, 

• s e {T, F} and t — ti <l a l> t2 

• s e {T, F} and t — ti<ixt>t2 

• s — si o a > §2 and i — <i <i 6 > t2 

• s ^ si < X > S2 and t — ti <lbt>t2 

• s — si < X > 32 and t — ti < y t> t2 



44 



Chapter 3. w-Completeness 



Let a : V A he a, closed substitution such that (t{x) = a and a{y) — b. 
Regardless of which case we pick, it follows that cr(s), a{t) e BF. Furthermore, 
ct(s) ^ cr(i). Consequently, a{s) <j{i) by Lemma 2.7. 

Suppose s — si<ix\>S2 and t — ti<\x\>t2. Since s ^t, we can assume without 
loss of generality that si ^ ti. By the induction hypothesis, there exists a closed 
substitution a such that cr(si) (^{ti)- Consequently, by Lemma 3.4, there 
exists a closed substitution t : V —?' A such that r(si) 7^/,. T{ti). Hence, by 
Lemma 2.6, r(s) 7^/^ T(t). Using a similar argument, we can prove this for 
s — Si < a > S2 and t — ti <ia>t2. □ 

The following theorem shows that CP is oj-complete. 

Theorem 3.6. Let s and t be open terms such that for all closed substitutions 
<7, CP hCT(s) = (7{t), then CP hs = t. 

Proof. Assume that Vcr : CP '^(^{s) ~ <y{t)- By Lemma 3.3, there exist open 
basic forms s' and t' such that CP \- s = s\t — t' . Hence, Vcr : CP \-a{s') = cr{t'). 
By soundness, it follows that Vtr : (t(s') =/,. <j{t'). Consequently, by Lemma 
3.5, s' ^ i', and thus CP hs' = t' . It follows that CP hs = i. □ 

We were not able to prove cj-completeness for CP^p and CPcr- Instead we 
note that using the same examples as before, it follows that both CP^p and 
CPcr are not oj-complete for \A\ < 2. Furthermore, proving w-completeness for 
the case \ A\ > 2 suggests that we adjust the set of open basic forms accordingly 
and then prove the same lemmas as before only this time using the altered set 
of open basic forms. 

3.2 w- Completeness of CPst 

The proof of w-completeness for the axiomatization CP^t is quite different from 
the previous proof. We will use a back-and-forth translation between CPst and 
an axiomatization of boolean algebra of which we know that it is w-complete, 
to show w-completeness of CPs*. 

In [ ] a proof of w-completeness for the axiomatization of an n- valued Post 
algebra is given. If we take n — 2 the axiomatization is that of a Boolean 
algebra. We obtain the following axiomatization by taking n — 2, and removing 
some of the redundant axioms. 



X V y 
X Ay 



y\/x 
y A X 

{x\J y)y z 



xV {yV z) 
X A {xy y) 
x\J {x A y) 
xV {y A z) 



X 



X 



(xVy) A{xV z) 



Fy X 



X 



xAT 



X 



X A^x 



F 



^x V X 



T 



^{x A y) 



^x V 
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We call this axioniatization BA. The signature of BA consists of T, F, ^, V and 
A. Expanding the signature with a set of atomic propositions A docs not affect 
the w-completeness of this axiomatization. We call the resulting signature T,ba- 
We use the following two translations between Scp(^) and T,ba, starting with 
the translation of T,cp{A) to Y^ba- 



= T 
= F 
= a 
= X 



{t<r>sy = (-./ V t') A {r' V s') 

Note that (^r' V t') A (r' V s') = (r' t') A (^r' s') which is perhaps more 
intuitive. The translation from Y,ba to T,cp{A) looks as follows. 



p* 
a* 

X 

(tVr)* 
{tAr)* 



T 
F 
a 

X 

F<it*>T 
r*<it*>F 



Note that these are translations over all terms including open terms. The next 
two lemmas show that the translations are sound i.e., if two terms are provably 
equal in either CP st or BA then their respective translations are also provably 
equal. 



Lemma 3.7. For all terms s and t, 
CPst ^s = t 



BA\-s' = t' 



Proof. It suffices to show that the translations of axioms CP 1-4, CPstat and 
CPcontr can be derived in BA. 



{x<T>yy = (-.T V x) A (T V y) 



{x<Ft>yy = (-.F Vx) A{FVy) 



= y' 



{T<x>Fy = (-.a; V T) A (x V F) 



x' 



Using a truth table we can check that the translations of CP4, CPstat and 
CPcontr are correct because BA is both sound and complete. □ 

Lemma 3.8. For all terms s and t, 



BA\- s = t 
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Proof. We just need to check that the translations of axioms of BA are derivable 
in CP St- We omit the trivial derivations. 



{xV y)* =T <\x>y 

= T <xt>{T <iy>F) 

= {T < X \> T) <[y > {T < X > F) 

= T oy t> X 

= {yV x)* 

{x Ay)* = y<xt> F 

= (T <\y> F) <\x> F 

= {T<xt-F)<yi>{F<xt>F) 

= x<iy> F 

= {yA x)* 



{xV{yV z)y 



T <ix> [T <\y> z) 

{T <t\> z) <ix> {T <iy> z) 

T<{T<\x\>y)\>z 

{{xyy)yzy 



{xA{xVy))* 



{T<ix>y)<x>F 

T<xt>F 



{xV {x Ay))* =T<\x>{y<ix>F) 
= T<x>F 



= X 



{xW {yA z))* =T<x>{z<iy>F) 

= {T <ixt> z) <iy{> {T <xi> F) 

= {T<x>{T <x> z)) <y> {T <ix> F) 

= T<\x> ((T <x>z)<y> F) 

= {T<\x\>z)<x> ((T <\x>z)<y>F) 

= {{T<ix>z)<iTt>F)<ix>{{T<\x>z)<y>F) 

= {T <x> z) <i{T <ix{>y)> F 

= {{xV y) A {xV z))* 
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(a; A -.a;)* = (F<aa;>r)<ia;i>F 
= F<x>F 



{-^xV x}* =T<\{F<xt'T)t>x 
= x<x>T 
= {T<x>F)<x>T 
= T<x>T 



{-^{x A y))* = F<{y<ixt>F)>T 
= {F<iy>T)<x>T 
= T<{F<x>T)>{F<y>T) 
= i^x V -^yy 



□ 



The following two lemmas show that the translations are invariant for each 
logic i.e., if a term t is translated first to one logic and then back to the original 
it is still provably equal to t. 

Lemma 3.9. For all terms s, 

cp^t y- {s'Y = s 

Proof. Proof by structural induction on s. If s e {T,F} U AUV then it is 
trivially true. Suppose s — Si <] S2 > ss- By the induction hypothesis, it follows 
that 

CP,t h (s'l)* = Si, (4)* = S2, (4)* = S3 



Then 



((Sl <3 S2 t> S3)')* = ((-4 V s'l) A (4 V 4))* 

= (T < (4)* > (4)*) <{T<{F< {s',r > T) > (4)*) > F 
=7i/ (T < S2 > sa) <{T<{F<S2>T)t>si)>F 
= {T<S2> S3) <{si<\S2>T)> F 

= ((T <S2> S3) <1 Sl J') <] S2 t> ((T < S2 > S3) < T o F) 

= ((T <: S2 > S3) <\si>F)<S2>{T<S2> S3) 

= ((T < S2 > S3) < Sl > F) < S2 > S3 

= {{T <Si> F) <\ S2 > (S3 < Sl > F) < S2 > S3 

= (T < Sl > F) <i S2 > S3 

= Sl <1 S2 > S3 



□ 
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Lemma 3.10. For all terms s, 

BAh (s*)' = s 

Proof. Proof by structural induction on s. If s G {T,F} U AU V then it is 
trivially true. Suppose s — ^si. Then 

Suppose s — Si V 52- Then 

= HsiyyT)A{{siyy{s*,y) 
^{siyv{s;y 

= IH Si V 32 

Suppose s — si A S2- Then 

= (-(^D'v A ((.D'VF) 
= {(4)' ^-(4)')^ my ^(4)') 

= (^*i)'A(.;)' 

□ 

The last lemma before proving w-completeness of CP^t is a variation of 
Lemma 3.4. 

Lemma 3.11. If for all closed substitutions a : V —>■ T(Scp(A)), 

BA h (t(s)' = <T{ty 
Then for all closed substitutions r : — > T(Eb^), 

BA h r(s') = T(t') 

froo/. Assume that Vct : BA h ct(s)' = a{ty with cr : ^ r(Sc'p(^)) closed 
substitutions. Let (t'(x) =de/ cr(a;)'. Since for all x Cz V, x' ~ x, it follows that 
a(s)' — cr'(s'). Hence, 

Vcr:BAh(T'(s')==cT'(t') (*) 

Let r : y — > T(I]ba) be a closed substitution. Furthermore, define a : V 
r(Ecp(A)) to be the substitution such that a{x) = t{x)* for all x e V. By 
Lemma 3.10, it follows that BA h t{x) — {T{x)*y — cr{xy = a'{x) for all x. 
Hence, BA h t(s') = cr'(s') and BA h r(<') = a'{t'). Consequently, by (*), 

BA h r(s') = fT'(s') = f7'(i') = ^(^') 
Thus, Vr : BA h r(s') r(i')- □ 



3.2 w-Completeness of CP^t 



49 



Having done the groundwork, it is now possible to prove that CP^f is w- 
complete. 

Theorem 3.12. Let s and t he terms over Y,cp{A) such that for all closed 
substitutions a, CPst l~ o'(s) = then CPat \~ s = t. 

Proof. Assume that 

Vcr : CPst y- <j{s) = a{t) 
where a is closed. By Lemma 3.7, 

V(T : BA h (t(s)' = a{t)' 

By Lemma 3.11, 

Vr : BA h r(s') = r(i') 
where r is closed. By w-completeness of BA, 

BA h s' = t' 

By Lemma 3.8, 

cp,t h {s'Y = [t'Y 

By Lemma 3.9 

CP,t ^ s = t 

□ 

In this chapter we have shown w-completeness for CP and CP^t . w-Completeness 
of the remaining two axiomatizations, CP^p and CPcr, remains an open issue 
with the exception of the case where there are less than two atomic propositions 
in which neither CP, CP^p nor CPcr are w-complete. 
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Independence of the axioms 



In this chapter we prove that the axioms are independent from each other. An 

axiom is independent with respect to a set of axioms if it cannot be derived 
from the other axioms e.g., CPl is independent in CP if CP2, CP3, CP4F CPl. 
This is a nice property for a set of axioms to have, as it shows that there are no 
redundant axioms. 

The standard strategy for proving that an axiom is independent consists 
of constructing a model such that every axiom except the one we are trying to 
prove independence for, is true in this model. In other words, if we want to prove 
that CPl is independent in CP, we show there is a model M and interpretation 
(f) such that 

(1) CP2-4 \- s = t implies that M \= (j){s) = (j>{t) 

(2) M ^ (/.(CPl) 

Hence, by contraposition of (1) it follows that CP2-4F CPl. Note that this only 
applies if is a model of equational logic i.e., reflexivity, symmetry, transitivity 
and congruence are all true in M.. 

In the following sections independence of axioms is shown for the different 
varieties of RVAs. 

4.1 Independence of CP 

Recall that /r-congruence is axiomatized by the axioms in CP, listed here again 

for the reader's convenience: 



(CPl) x<\T>y 

(CP2) x<iF>y 

(CP3) T<ix>F 

(CP4) x<\{y<izt>u)t>v 



X 



y 



X 



{x <iy>v) < z> {x <iu>v) 
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Wc start by proving independence of CPl. In order to do this we need to 
construct a model such that CP2, CPS and CP4 are true in this model but CPl 
is not. Take a look at the following model: 

MT) = T 
MF) = F 

4>i{a)=T 

for all a G A with V as in sentential logic and as domain {T, F}. Observe that 
this is a model of equational logic, in particular congruence is true. The next 
step in proving independence for CPl is to show that CPl does not hold under 
this interpretation. We do this by giving a coimtcrcxample i.e., we take a specific 
instantiation of this axiom and show that the left-hand and the right-hand side 
of CPl are not equal. If CPl were true in this model then (j)i{F<T>F) = <j)\{F). 
However, (j)i{F <iT t> F) = T, and hence unequal to cj)i{F) = F. Therefore, CPl 
does not hold in this model. Now we have to check whether CP2-4 do hold: 

<^i(P<F>Q) = FV0i(Q) 

(t)i(T<3P>F) =4)i{P)\/ F 
= MP) 

= MR)y{MP<s>v)) 

= M{P <Q ^y) < P^ {P < s >v)) 

Since CP2-4 arc true in this model but CPl is not, we can conclude that CPl 
is independent with respect to CP. 

Proving independence for the remaining axioms requires that we repeat these 
steps for each axiom. So let us continue with proving independence of axiom 
CP2. This time we construct a model such that it models CPl, CPS and CP4 
but not CP2. 

hiT)=T 

MP<Q>R) = MP)^MQ) 

for all a € A. Then we check whether CP2 does not hold. Since (f)2{T<F>T) = 
F 7^ 4'2{T), this is true. It is easy to see that CPl and CPS are true in this 



4.1 Independence of CP 
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model. That leaves us with checking CP4: 

(j)2{P<{Q<R\>S)>V) = (p2{P)AMQ<I^>S) 

= MP<Q>v) AMR) 

= MiP<Q>v)<R>iP<s>v)) 

So CP4 also holds under this interpretation, and thus we know that CP2 is 
independent. 

The previous two models looked quite similar, in particular the models share 
the same domain i.e., {T, F}. In proving the independence of CPS we will show 
that this is not always the case. The model we will be constructing here has a 
finite set of natural numbers as domain, and as a result differs quite a bit from 
the standard semantics. 

The construction of this model requires that we first enumerate the atomic 
propositions in the set A: 

0-1,(12, ■ ■ ■ ,an 
Using this enumeration we can define our model: 

MT) = 
03 ("i) = -i 

>3(p) if 03(g) <i 

MR) if03(Q)>i 



h{P<Q>R) 



Note that congruence is trivially true in this model. By definition there is at 
least one atomic proposition i.e., ^ ^ 0. So, we can always assume that ai 
exists. Observe that (j)3{T < ai > F) — (t>3{T) ^ 03(01). Hence, CPS docs not 
follow. Checking to see that CPl and CP2 are true is trivial. That leaves CP4: 



b^{P<\{QAR\>S)>U) 



MP) iiMQ^R>s)<\ 
Mu) iiMQ<R^s)>i 

'MP) if 03(i?)< land 03(0) <1 

MP) if 03(i?)> land 03(5) <1 

MU) if MR) < 1 and 03(0) > 1 

>3([/) if 03(i?) > 1 and03(5) > 1 

'MP<Q>U) if 03(i?) < 1 and03(g) < 1 

03 {P<St>U) if 03 (i?) > 1 and 03 (S) < 1 

MP<Q>U) if 03(i?) < 1 and 03(0) > 1 

^MP<S>U) if 03(i?) > 1 and 03(5*) > 1 

fMP<Q>u) if03(i?)<i 
[MP<St>u) if03(i?)>i 

h{{P <iQ >U) <i R> {P < S >U)) 
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So CPS is also independent. 

Let A = {ai, . . . , a„}. Take the following interpretation: 

MT) = 1 

(/>4(aj) = i + l 

( MP) if MQ) = 1 

Mp<Q>R) = \mr) if<^4(Q) = o 

[(/)4(P) • (/)4(Q) otherwise 

Clearly, congnuaicc and CPl-3 arc true in this model. Furthermore, it follows 
that MP < ai T) = MP)^^!) = 0. Hence, 

MP < (-F < cii T) T) = MP) 
= 1 

However, 

M{P<P>P)<ai>{P<P> P)) = MP <P> P)Mai) 

= 2 

So CP4 is not true using this interpretation. Hence axiom CP4 is also indepen- 
dent with respect to CP. Since this is the last axiom in CP, we have now shown 
independence for all the axioms in CP. Consequently, there are no redundant 
axioms in CP. In the next section we will be looking at an extension of CP i.e., 
the axiomatization of rp-congruence. 



4.2 Independence of CP^^p 

The axiomatization of rp-congruence is an extension of CP with the following 
axioms: 

(CPrpl) {x<ia>y)<ia>z = {x<a>x)<ia>z 
(CPrp2) x<a>{y<iat'z) = x <ia> {z ^at- z) 

Note that these are actually axiom schemes i.e., for each a € A we have an 
axiom CPrpl and CPrp2. Since we have a new set of axioms, we are required, 
in addition to proving the independence of the two new axioms CPrpl and 
CPrp2, to prove that CPl-4 is independent with respect to this new set of 
axioms. Fortunately, it is possible to reuse the models used in the previous 
section i.e., for the cases CPl-4 the same models are taken. It then suffices for 
these cases to show that CPrpl and CPrp2 are true in these models. 

We start by taking the same model as we did in the previous section for 
proving the independence of axiom CPl, and then checking if it models CPrpl 
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and CPrp2. 

(f)i{{P<3a>Q)<ia>R) = (f)i{a) V (^(i?) 

= 4>i{{P<ax>P)<ax>R) 

(pi{P <\at> {Q <ia> R)) = <j>i{a)\/ 4>i{Q <a> R) 

= </)i(a)V(<^i(a)V</)i(i?)) 
= (l)i{a)V (f>i{R<a\>R) 
= (j)i{P <a\> {R<a>R)) 

Repeat this procedure for the models given for the independence-models of 
CP2, CP3 and CP4. 

<f)2{{P <a>Q) <a> R) = (f)2{P <ia>Q) A (j)2{a) 

= (MP) ^ Ma)) /\ Ma) 
= (f>2iP'^at>P)A(j)2{a) 
= (j)2{{P<a>P)<iat>R) 

(l)2{P <a>{Q<a\>R)) = (j)2{P) A ^2(0) 

= (f)2{P <a> {R<a> R)) 

We only show that CPrpl holds in the model given for case CPS because 
the proof that CPrp2 is true in this model is symmetric to that of CPrpl. 



1)3{{P <a>Q) <a> R) 



MP<a>Q) if Ma) < I 
MR) if Ma) > I 

^iMP) if03(a)<l 
\MR) if<^3(a)>l 

^U3{P<a>P) if<^3(a)<l 
[MR) ifMa)>l 
= M{P<a>P)<a\>R) 

The following shows that CP4 is also independent in CPr-p. 

M{P <at> Q) <iat> R) = MP '^at' Q)<j)4{a) 
= MP)Ma)Ma) 
= MP ^a\> P)Ma) 
= M{P <a> P)<a> R) 

MP < a > (Q < a > i?)) = MP)(l>{a) 

= (f>4{P <i a > (Q <: a o R)) 

The model for showing independence of CPrpl is based on the reactive 
valuation variety that satisfies 

ya{x)=F =^ y,{^{x)) = F 
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Wc call this variety rpl. By definition, this is a siibvariety of the variety with 
free reactive valuations. Thus, by soundness of free reactive valuations, it follows 
that the resulting congruence =rpi (constructed similarly as =fr, =rp, etc.) is 
a model for CP. Hence, we do not have to check whether CPl-4 are true in this 
model. 

If a/H = T, it is possible that a/H ^ a/-^ (H) for some A e rpl and H G A. 
Consequently, 



{{T<a>F)<a>F)/H 



+ { 



if a/H = T axiAa/-§^{H) 
if a/H = T and a/^{H) 
if a/H = F 

if a/H = T and a/£{H) 
if a/H = T and a/ ^{H) 
if a/H = F 



T 
F 

T 
F 



{{T<iat>T)<a>F)/H 



Thus, CPrpl is not true. However, CPrp2 is. 



{P<a>{Q<,a>R))/H=[^''^^"^\ 

y{Q<ia>R)/-§^ 



if a/H = T 
if a/H = F 



if a/H = T 



Q/laifaW) iia/H = F and a/ i^{H)=T 



if a/H = F and a/£{H) = F 
if a/H = T 

if a/H = F and F = T 
if a/H = F andF = F 

if a/H = T 

if a/H = F andF = T 
if a/H = F andF = F 

-,aa-- iia/H = T 

RIUUH)) if a/H = F and a/l{H)=T 
R/lilm iia/H = F and a/ 1{H) = F 
= {P<a>{R<a>R)/H 



Q/UliH)) 



= < 



d{P<a>{Q<at>R)) 



{H) 



dR\day da 



d I d ( d 
K dR\da\da 

d 



d{P<ia\>{R<a{>R)) 



if a/H ^ T 

if a/H = F and a/-§^{H) = T 
if a/H = F and a/^{H) = F 

if a/H = T 

if a/H = F and a/^{H) = T 
if a/H = F and a/^{H) = F 



4.3 Independence of CP, 



57 



Note that both a/H ~ F and a/-^{H) = T is impossible. Hence, we can 
replace with in the above derivation. 

The proof for showing independence of CPrp2 is symmetric to the one in 
CPrpl, using the reactive valuation variety that satisfies 

ya{x) = T =^ y^(^(a;))=T 

We call this variety rp2 and we will use this variety in the next section. 



4.3 Independence of CPcr 

The axiomatization of cr-congruence consists of CP and the following axioms 

(CPcrl) {x<a>y)<a> z = x<\a> z 
(CPcr2) x<a>{y<a>z) = x<ia> z 

Like in the previous section, it is possible to reuse the models given for CP, and 
just show that CPcrl and CPcr2 are true in these models. Starting with CPl: 

(f)i{{P<a>Q)<a>R) = <?!>i (a) V 0i (i?) 

= (f)i{P<a\>R) 



4>2{{P<at>Q) <iat> R) 



01 (a) V (f)i{Q <ia> R) 
Ma) (Ma) MR)) 

Mo')yMR) 

MP<a>R) 



4>2{P<a>Q) A 02(a) 
(MP) A 02(a)) A 02(a) 
02(P) A02(a) 
MP<a>R) 



MP<a>{Q<iai>R)) = MP)^(t)2 (a) 
= MP<a>R) 

Similar to the previous section we omit the proof that CPcr2 is true in the 
independence- model for CP3 as it is symmetric to that of CPcrl. 



1)3{{P <a>Q) <a> R) 



\MP<a>Q) if 03(a) <1 
[MR) if 03(a) >1 

\MP) if03(a)<l 
(03(i?) if03(a)>l 

b3{P<at>R) 
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Unfortunately, wc have not bcicn able to find a model that demonstrates the 
independence of CP4 in CP cr- The model we used in previous sections does not 
work in this variety. For example, we have the following. 

04((r<iai>F)<aii>T) =4 

= (j)4{T<ia\>T) 

Hence, CPcrl is not true in the resulting model, and thus </)4 does not suffice. 
The question whether CP4 is independent in CPcr remains therefore open. 

In order to construct the model that shows independence of CPcrl, we take 
the variety of all algebras from variety rpl that satisfy 

d d d 

for all a G A. We call this variety crl. It follows that there is an A e crl and 
H G A such that 



{{T<a>F)<a>T)/H = < 



T/H ifa/H = T anda/^{H) =T 
F/H lia/H = T a.nAa/§^{H) = F 
F/H i{a/H = F 

(t/H if a/H = T 
[F/H if a/H = F 

= {T<a>T) 



Checking CPcr2: 



{P<ia>{Q<a>R))/H = 



P/liH) 



= {P<ia>R)/H 



if a/H = 
if a/H -- 
if a/H -- 

if a/H = T 
if a/H = F 



T 

F and a/ j 
F and a/ -, 



l{H)=T 
l{H)=F 



d{P<a>{Q<ia>R)y ' 



, dR 

d{P<ia>Ry ' 



if a/H = T 

if a/H = F and a/§^{H) = T 
if a/H = F and a/^{H) = F 

if a/H = T 
if a/H = F 

if a/H = T 
if a/H = F 
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A proof of independence for CPcr2, starts by taking the variety of all algebras 
from variety rp2 (see previous section) that satisfy 

d d d 
oa oa oa 

for a G A. The proof for showing independence of CPcr2 using this variety is 
symmetric to the previous proof of independence for CPcrl. 

4.4 Independence of CT*st 

In this section we show independence of the axioms CP2, CPS, CPstat and 
CPcontr. 

(CPstat) {x<y>z)<u>v — {x <u> v) <iy> {z <u> v) 
(CPcontr) {x<iy>z)<lyt'U = x<iy>u 

The models we used in the previous sections to show independence of CPl and 
CP4 cannot be used here because CPstat and CPcontr are not both true in these 
models. We give two counterexamples to show this. The first counterexample 
shows that CPstat is not true in the independence-model for CPl. By CPstat 
the terms {T <iT t>T) > F > F and {T < F > F) <iT > {T < F t> F) should be equal. 
However, this is not the case. 

<l)i{{T<Tt>T)<Ft>F) = (t)i{F) W (t)i{F) 
= F 



(^1 ( (T < F o F) < T o (T < F o F) ) = 01 (T) V ?!>i (F) V 01 (F) 

= T 

The second counterexample shows that CPcontr is not true in the model we 
used for showing independence of CP4. 

04(T<iai >F) <]ai oT) = 4 

= (i)A{T<ai>T) 

Proving independence for both CPl and CP4 in CP^t remains an open issue. 

We can use the same models we used in the previous section for showing 
independence of CP2 and CPS. 

(/.2((P < > i?) < 5 > y) = (t>2{P) A 02(Q) A (l)2{S) 

= (f)2{{P < S >V) <Q > {R< S >V)) 



60 



Chapter 4. Independence of the axioms 



i)3{{P<iQ>R)<S{>V) 



h{P<Q>R) iiMS)<l 

h{v) iiMS)>i 

MP) if03(5)<land03(Q)<l 
)3(i?) if 03(^) < 1 and<^3((3) > 1 

>3iv) if MS) > I 

)3(P) if <^3(^)< land 03(0) <1 

.3(i?) if <^3(5) < 1 and 03(0) > 1 

.3(y) if 03(5) > 1 and03(<3) < 1 

.3(y) if 03(5) > 1 and03(<3) > 1 

'3iP<S>V) if03((3)<l 

'3{R<s>v) if 03(g) >i 



b3{{P<Q>R)<Q>S) = 



MP<Q>R) if'/'3(Q)<i 

>3(5) if 03(0) >1 

^f03(P) if 03(0) <1 
[US) if 03(0) >i 

= MP<Q>s) 

Showing independence of CPstat requires that we define the following sub- 
variety of fr which consists of all RVAs that satisfy 



Q/x 



and 



d d d 



Note that this is a generalization of the variety cr. We show that CPstat is not 
true in this variety by constructing an algebra A and valuation H £ A such that 
a/H = F, b/H = T, a/g{H) = T and h/-§^{H) = T. Then 



{{F <iat>T)<iht'F)/H 



F 
T 
F 

= F 
(F 



= < 



F 
T 
F 



if b/H 
if b/H 
if b/H 



if a/H 

if a/H ■ 
if a/H : 
if a/H 



Tand a/§;iH) 
Tand a/g{H) 

: F 



T a.nd b/l{H) 
T and b/£{H) 
Fand b/iiH) 
:Fand b/liH) 



T 
F 



■ T 

: F 

: T 

: F 



{{F<ib>F)<ia>{T<ibt>F))/H 
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Hence, CPstat is not true. Since this is a subvariety of fr, by Theorem 2.3 it 
sufBces to prove that CPcontr is true in this modeL 



(P/^^iH)) HQ/H = T and Q/i^{H)=T 
{{P<Q>R)<iQ>S)/H^ }r/^{^{H)) HQ/H = T and Q/^{H) = F 

[s/^iH) \iQ/H = F 

r P/ ^ [H] if Q/H = T and Q/H = T 
^\r/^{H) a Q/H = T and Q/H = F 
[s/i^iH) iiQ/H = F 

^[PliiW ^iQ/H = T 
[S/i^{H) HQ/H^F 

= iP<Q>S)/H 



d 



diiP<Qc>R)<Qt>S) 



Opi^ii}iH))) a Q/H = T and Q/i^{H)=T 
Js&H)) ifQ/H = F 

d 



[Mm^H)) if Q/H ^F 
d{P<iQ>Sy ' 

So by Proposition 2.2 CPcontr is true in this model. Since CP and CPcontr are 
true and CPstat is not, it follows that CPstat is independent in CPgj. 

The model that shows independence of CPcontr has the integers as its do- 
main. Similar to the independence-model for CPS, we assume that the set A is 
enumerated i.e., A — {oi, 02, . . . , a„}. 

m = 1 

0(F) = 

(l){ai) = i + 1 

0(p < Q > i?) = 0(g) • 0(p) + (1 - 0(g)) • 0(i?) 

CPcontr is not true in this model: 

0((r < fli > F) < ai > F) = 0(ai)0(r < ai > F) + (1 - 0(ai))0(F) 
= 2(0(ai)0(r) + (l-0(ai))0(F)) 
= 4 
^2 

= 0(ai)0(F) + (l-0(ai))0(F) 
= 0(T<]ai t>F) 



The following derivations show that this is a model for CP 1-4 and CPstat. 
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The first three derivations are easy. 



(f>{p<T>Q) = (f>{T)cf>{p) + (1 - mmQ) 

= l-(l>{P) + 0-4>{Q) 



ct>{P<F>Q) = cj,{F)<i>{P) + (1 - <^(F)).^(Q) 
= • cj,{P) + 1 • <^(Q) 



0(r < P > F) = (f>{P)<l){T) + (1 - <p{P))<j){F) 
= <^{P) • 1 + (1 - 0(P)) • 

= 4>{P) 



Checking whether CP4 and CPstat are true in this model requires some book- 
keeping. 



< (Q < i? 5) > V^) = 0(Q < i? S)(j){P) + <l>{Q<Rt> S))<t>{V) 

= {(i>{R)<t>{Q) + (1 - mmsmp) 
+ (1 - {<p{R)ct>iQ) + (1 - <i>{Rms)mv) 

= <i,{R)<i,{Q)4>iP) + HsmP) - HR)HsmP) 
+ - 0(i?)0(Q)0(y) - <^(5)</)(y) 

= 0(i?)0(g)0(p) + <piR)<Piv) - 0(i?).^(Q)0(y) 
+ </.(5)</)(P) + </.(y)-0(5)</.(F) 

- cf>iR)<f>{s)<p{p) - mm + m)^{s)4>{v) 

= miHQMP) + (1 - HQmv)) 

+ (1 - mms)<f>ip) + (1 - <A(^))<^(v)) 

= 0(i?)0(P < > F) + (1 - (t){R))(t){P <iSi>V) 
= (j)iiP <iQ>V)<iRt>{P<iS>V)) 
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<^((P <Q>R)<S>V) = <l>{S){cj>{Q)<j>{P) + (1 - <l>m<t>m + (1 - <t>{S))cl>{V) 
= <j>{S)m)m + <f>{S)<P{R) - <p{S)<i>{Q)<i>{R) 

+ ct>{V) - ct^ivms) 
= ^{Q)<p{S)4>{P) + m)4>{v) ~ 0(Q)0(5)0(y) 

+ <j>{S)m + m - <P{S)<i>{V) - cl>{Q)(t>{S)ct>{R) 
-cf>{Q)<l>{V) + cf>{Q)<P{S)<i>{V) 

= ,^(Q)((/.(5)0(P) + (1 - HSmV)) 

+ (1 - cp{Q)ms)cb{R) + (1 - Hsmv)) 

= (j){{P <iS>V)<Q>iR<S>V)) 



Since CP and CPstat are true in the model and CPcontr is not, CPcontr is 
independent. 
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Conclusion 



In this final chapter we give a short summary of the previous chapters, thereby 
hsting some of the main results. Furthermore, we discuss the open issues men- 
tioned in the previous chapters, and finally give some suggestions for future 
work. 

5.1 Summary 

Sentential logic is limited by the static behaviour of its valuations. In Chapter 1 
we introduced the reader to reactive valuations. These reactive valuations, first 
defined by Bergstra and Ponse in [">], are an extension of normal valuations 
because they allow us to take the evaluation order of the expression into account. 
By means of a few examples we illustrated the advantages of using reactive 
valuations instead of normal valuations. Similarly, we also revealed some of the 
limitations of using reactive valuations. At the end of the introduction section, 
we showed that it is possible to define several classes of reactive valuations 
depending on their behaviour. 

As motivation for looking at reactive valuations we argued that these are 
interesting because they can be used to model a variety of sequential processes. 
In the section on motivation we provided a few examples of sequential behaviour 
from e.g. computer science and linguistics. 

Since reactive valuations are a recent invention by Berstra and Ponse, there 
is no directly related work on reactive valuations, besides the main paper [5]. 
We, therefore, opted to list some broad areas which might pertain to reactive 
valuations e.g., non-monotonic reasoning, program semantics and many- valued 
logics, thereby giving a few specific examples. 

In Chapter 2 we defined the axiomatization of reactive valuation congru- 
ence, called CP, and its semantics. The underlying semantics consists of several 
parts. In the first part we described reactive valuation algebras (RVAs). In the 
second part we showed how we can compute the value of closed term P, given 
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an RVA A and reactive valuation H E A. The value is denoted as P/H. By 
imposing limitations on the RVAs and their valuations we can define several 
varieties of RVAs, namely the varieties with free reactive valuations, repetition- 
proof valuations, contractive valuations and static valuations. The signature 
of all these varieties is the same, and consists of constants T and F, an infi- 
nite set of variables, a finite set of atomic proposition symbols and the ternary 
operator _<_!>_ denoting conditional composition. Each variety has its own 
axiomatization, where the axiomatization CP corresponds to the variety with 
free reactive valuations. Given a variety K, we say two closed terms P and Q 
are JsT-equivalcnt if P/H ~ Q/H for RVAs A € K and valuations H e A. Un- 
fortunately, /^-equivalence does not necessarily have the congruence property. 
We, therefore, define /T-congruence as the largest congruence contained in the 
ii'-equivalence relation. 

With the aim of showing soundness for the various varieties it sufficed to 
show that each axiom is also true under semantical congruence. So if ^4 = B 
is an axiom of variety K, we need only show that A and B are /C-congruent. 
In these proofs we took advantage of the fact that if an axiom is sound with 
respect to a variety K then the axiom is also sound in all subvarieties of K. 

In order to show completeness we introduced basic forms, where each sen- 
tence is provably equal to a unique basic form. The main advantage of basic 
forms is that their syntactic structure is quite simple. Consequently, structural 
induction on the set of basic forms is relatively easy. By showing that for basic 
forms syntactical equality and semantic congruence coincide we were able to 
prove completeness. Each variety requires its own set of basic forms. 

Given an axiomatization, if for all closed substitutions a and terms s and t we 

can derive (t(s) = (7{t), we can also derive s ^ t, wc say that this axiomatization 
is w-complete. In Chapter 3 we discussed w-completeness of CP and CP^t, the 
axiomatization of sf-congruence. 

Similar to the completeness proofs in Chapter 2, we defined a special set 
of terms, namely the set of open basic forms. As opposed to the various sets 
of basic forms used to prove completeness, the open basic forms may contain 
variables. Using these open basic forms we were able to prove w-completeness 
for CP. 

For CPst, we used a different approach. This approach does not rely on a 
set of open basic forms but on a translation between CPsi and a specification of 
boolean algebra for which we know that it is w-complete. Using this translation 
we show that the w-completeness property transfers to CP^t. We did not show 
w-completeness for the other varieties. 

Independence of an axiom with respect to a particular axiomatization entails 
that the axiom is not redundant in that set of axioms i.e., it is not derivable 
from the other axioms. In Chapter 4 we showed independence of axioms with 
respect to the various axiomatizations. Showing that an axiom P is independent 
of a set A of other axioms requires that we construct a model such that P is 
not true in this model but the axioms in A are. There were a few axioms for 
which we did not succeed in proving that they were independent e.g., CP4 for 
contractive valuations. 



5.2 Open issues and future work 
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5.2 Open issues and future work 

In the past chapters several specific open issues were mentioned. We will list and 
discuss these issues in this section. Afterwards, we give some general suggestions 
for future work on the subject of reactive valuations. 

5.2.1 Open issues 

The first set of open issues is mentioned in the chapter on w-completeness. We 
were not able to establish w-completeness for CP^p and CPcr- In Chapter 3 we 
showed oj-completeness for CP and CP st using two different methods. 

The method we used for CPs* involved a translation between an equivalent 
w-complete axiomatization and CPst. Unfortunately, this will not work for 
CPrp and CPcr because finding an equivalent w-complete axiomatization for 
these axiomatizations is unlikely. 

Consequently, the best approach seems to be the one we used for CP, where 
we used open basic forms. However, first attempts at using this method failed 
to yield a positive result. The open basic forms as defined in Definition 3.2 have 
the nice property that if we substitute each variable in an open basic form with 
an atomic proposition we end up with a closed basic form i.e., a member of BF 
(see Definition 2.4). We use this property and the results we already have for 
BF in the lemmas leading up to the w-completeness theorem. The problems 
arise when we define similar open basic forms for CP^p and CPcr. For example, 
take the term 

(r<iai>F)<ix>r 

At first glance this seems like an excellent candidate for the set of open basic 
forms of both CPrp and CPcr- However, if we substitute the x with atomic 
proposition a, the resulting term is neither a member of BFrp nor of BFcr- 
Whether it is possible to work around this problem remains to be seen. Addi- 
tional tools for proving w-completeness can be found in [12]. 

The second set of open issues concerns the independence of axioms. We 
failed to show independence of CP4 in CPcr. For the axiomatization CPst we 
only showed independence of CP2, CP3, CPstat and CPcontr, which leaves CPl 
and CP4. 

We showed the independence of an axiom with respect to a particular ax- 
iomatization by constructing a model such that the axiom in question is not 
true but the rest of the axioms in the axiomatization are. Constructing such a 
model is regrettably a hit-or-miss affair and becomes increasingly more difficult 
as the number of axioms multiply. We can, however, eliminate some options. 
In Chapter 3 we used roughly three methods of model constructions. 

The first method involves using normal valuations as we know them from 
sentential logic. The constants T and F are mapped to true and false, and 
similarly the atomic propositions are mapped to either true or false. Conditional 
composition is interpreted using a combination of connectives, thereby ignoring 
evaluation order, e.g., F <i Q i> i? is mapped to (Q — >■ P) A (-iQ — >■ R)- We used 
such a method to prove that CPl and CP2 are independent with respect to 
CP. Since there are only a small finite number of interpretations of conditional 
composition it is easy to check them all. We, therefore, wrote a small Prolog 
program that checks these interpretations given a set of axioms to model and 
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the one it should not model. There were no interpretations that proved the 
independence of the aforementioned axioms. 

The second method relies on constructing a variety of RVAs. We used this 
method to show independence of e.g. CPcrl and CPcr2. The problem is that 
such a variety is by definition a subvariety of fr. Since we proved that the axioms 
in CP are sound in fr (see Theorem 2.3), they are sound in all subvarieties of 
fr. The axioms for which we need to prove independence are all in CP, and 
therefore this method will fail automatically. 

This leaves us with the third option of constructing an interpretation in 
the natural numbers with the usual operations of addition and multiplication. 
Whether or not this method will work remains an open question. Of course, 
there are many other possibilities that are not listed here e.g. an interpretation 
in an n- valued model that takes the evaluation history into account. 

5.2.2 Future work 

In Chapter 1 we discussed some possible application areas for reactive valu- 
ations. However, we did not go into great detail as to the specifics of such 
applications, and more importantly what is to be gained by the use of reac- 
tive valuations. This search for specific applications might also yield new and 
interesting varieties of RVAs. 

Chapter 1 also contained a discussion on related work in which we mentioned 
that besides the main reference [5] there is no related work directly pertaining 
to reactive valuations. We, therefore, listed some areas of interest with possible 
connections to reactive valuations. These and other areas warrant a more in- 
depth study, which may involve translations between varieties and other logics. 
For example, in Chapter 3 we showed a translation between the variety with 
static valuations and boolean algebra. 

Proposition 2.2 was, despite its apparent simplicity and usefulness, discov- 
ered towards the end of writing this thesis. This proposition which given variety 
K describes the relationship between if-equivalence and iC-congruence, is used 
extensively in the various soundness proofs throughout this thesis. We, however, 
have not yet fully taken advantage of this proposition in proving completeness. 
We feel that this proposition will in all likelihood simplify the proofs of some of 
the crucial lemmas we need for completeness. 

Furthermore, we used basic forms to prove completeness. Alternatively, 
we can define a term rewriting system with convenient normal forms for each 
variety, and use that to prove completeness. In Appendix B we give an example 
of such a term rewriting system. 

In this thesis we gave some suggestions for future research. Of course, these 
suggestions are not exhaustive as there are many other options for further re- 
search not mentioned here e.g., results in expressivity and complexity. 

On a final note, during the writing of this thesis a new paper on reactive 
valuations by Bergstra and Ponse appeared^, see [4], which would be a fitting 
starting point for any future research. 



^In fact the main reference [ ] was a prior draft for this paper. 
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Characterization of CP+CP5 



A.l Non-replicating valuations 

In this appendix we define an additional variety, which uses non-rephcating 
valuations. It is axiomatized by CP plus the CP5 axiom, 

(CPS) X <y > {z <iu> (v <iy > w)) — x<y>{z<iuc>w) 

The CP5 axiom is taken from the appendix of [ ]. In that appendix Bergstra 
and Ponse show that the symmetric version of this axiom can be derived from 
CP+CP5: 

((x <y t> z) <u> v) <iy >w = w <i —•y > (w < -^u t> {z < -^y > x)) 

~ w <i ^y > (u o > x) 
= {x<iut>v)<iyt>w 

with ^x — F <ix\>T . 

The variety of RVAs with non-replicating valuations consists of all RVAs 
that satisfy the equations: 

d d 

Va{x) = 2/a(^(^(a;))) 

and 

d d d d d 

for all a e A and P € AU {T, F}. We call this variety nr. 

The following lemmas show that the above equations imply their more gen- 
eral versions. Note that the P in the next lemma ranges over all closed terms 
not just AU{T,F}. 

Lemma A.l. For all closed terms P, 

d d d d d 
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Proof. By structural induction on P: 

. UP e AU{T,F}then JL(|,( JL(7J))) = follows directly from 

the definition of L. 

• Suppose P-Pi<P2>P3. Then 

d( d d ^ r|-( if P,/JL(7J) =r 

da^d{P,<P2>Ps)^da^ U(afe(afe(i(™) ifP2/l{H)=F 

' UA^UMUh))))) iiP.iiiH) 



-IH 



— IH 



-IH 



f3 



dPi<iP2>P3 da 



□ 



Lemma A. 2. For all closed terms P and Q, 

^4*i^<^'' ^ '''' 

Proof. By structural induction on P: 

• The case for P - T or P - F is trivial because T/H = T and F/H = F 
for any valuation H. 

• Suppose P ^ a for a Cz A. Then by structural induction on Q. 

— The case for Q E AU {T, F} follows directly from the definition of 
variety L. 

— Suppose Q ~ Qi <iQ2> Qs- Then 



'a/H iiQ,/fjH) = T 
a/H ifQ,/fjH) = F 



-IH 



-IH 



a/H 



In the second step of this derivation Lemma A.l is applied i.e., we 
substitute ^^iUH)) with K^^diH))). 
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• Suppose P - Pi <i P2 > P3. Then 



(Pl<P2>P3)/Jr( 



d 



9Q^9(Pi<P2>P3) 

'P / 9 ( 9 f d 

,-^3/ af^(aQ(a(Pi<]P2[>P3) 



W)) if^^/g^( o(P.<P..P3) (g)) = 



= T 



= P 



A/ 



Pi/ ^ 



dP2 



8(8(8 

8P2 ^ 8Q ^ dPs dP2 

8(8(8 

8P2 ^ 8Q ^ 9P] 



m)) 
8P2(Hm 



T and P2/H = T 
T and P2/H = F 
F and P2/ff = T 
if ^2/^3(5^(5^^)) = P and P2/H = F 



if -^2/ -iqim^im. 



m\yaP2iH))) 

{H))) 



^1/ 8{Qlp2)^m\^mW)) 
P3/ a(Qtp2)(af^(af^(-^))) 



if ^2/9p^(gf^(i?)) - T and P2/i/ = T 



9(P3oQ) 



iiP2/ 

if -^2/ 9(PioQ) "^af^ 

if ^2/9p|^( J^W) = and P2/i7 = F 



{^^{H))^T m,dP2/H = F 
iJk{H)) = F andP2/H^T 



'p^/Mh) 

"'p^iMMASAW))) 

p^IMh) 



if P2/iJ = T and P2/H = T 
if P2/iJ = T and P2/i/ = P 
if P2/i? = P and P2/i? = P 
if P2/iJ = P and P2/i? = P 



\P3/J^(i/) iiP2/H^F 



= {P,<P2>P3)/H 

Note that sequential composition o is defined in Chapter 2, and P o Q = 
QoPoQ. 

□ 

Lemma A. 3. For all closed terms P and Q, 



d d d 

dP^dQ^dP^''^^^ 



dQ^dP^'"'' 



Proof. By structural induction on P: 
• P is P or P; trivial. 



• P e A; see Lemma A.l. 
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• Suppose P-Pi<P2t>P3. Then 
d ^d_^ d 



d{Pi < P2 > P3) ' d{Pi <P2>P3 

) ifi^2/ 

m)) if^2/g^( 



aPi (oPa (aQ(a(Pi<iP2oP3) f^-^)))) if -P2/ dQ^d{Pi<P2>P3)^^^^ 



d 

d{Pl<P2t>P3) 



{H)) = F 



dPi V dP2 ^ dQ V OPi V dP2 



> dQ V OP 

1 V ap, V 



{H)m 



a ( a 

dPi y dP2 ^ dQ y aPs y aP2 

m^^aP2^aQ^aPi^aP2^-^^^^^^ 
_d_(_a_ 

I. aPs aPs ^ dQ V aPa V aPa 



'XdPo^ao^apSaPo (^))))) 



if p^iMA^M^))) = p = T 

if ^2/ = F and P2IH = F 



y aooPo y 



dPi y dQoP2 y dPi ( aP2 
aF\(dP^(aQ 
aP3^aP2^aQ 
L aps^^ag^ 



if ^2/, 



a 



a 



aPioQ^aPs 

if^2/g74o(g|-W) 



T and P2/H 
T and Pa/^^ 



aP3oQyaP2 

if ^2/ai^( = and P2/H = T 

if ^2/ai|^( = F and P^/i/ = P 



Now it is not only possible to apply the induction hypothesis but also 
Lemma A. 2 which will result in a reduction in the number of cases: 



-'IH < 



dPi y aP2 y aQ y aPa aP2 
a 

ap; 

a 



iikiH))))) 



aP3 ( aP2 ( aQ (alr(akW)))) 



(al^(aiW)) 



L agoPa "-aPa vaP; 



if Pa/i? = T and Pz/iJ = T 
if P2/H = T and P2/H = F 
if Pa/i? = P and Pa/i? = T 
if Pa/i? = P and P2/H = F 



a 



aQoP2 y dP3 y dp 



T 
F 



A^y^^A(H))) if p./i? = p 



-IH 



a 



aPioQ 

. aPaoQ 



if P2/H = T 
if P2/H = F 



'IH 



aq 



(mi 



\iP2lH = T 



J?(af^(afeW)) ^fP2/H = F 



d 



d 



dQ'diPi<P2>P3) 



□ 



A. 2 Soundness 
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These three lemmas wih demonstrate their usefulness in the next section 
where we will prove soundness. 



A. 2 Soundness 



Theorem A.4. CP+CP5V- P = Q implies that P ■ 



Proof. Since the axioms in CP are sound for the variety fr of RVAs with free 
reactive valuations, and nr is a subvariety of fr, it suffices to check CP5: 



{P<iQt>{R<iS>{V <iQt> W)))/H 

\R<iSi>{V <iQi>W))l-§Q{H) MQIH 
RlMM^)) iiQ/H = FandS/^{H) 



T 
F 



= < 



iV<Q>W)/^{i^iH)) 



ifQ/H = F and S/^{H) 



T 
F 



iiQ/H = T 

if Q/H = F and S/^{H) = T 
if Q/H = F, S/^{H) = F and Q/^(^(i/))-T 
if Q/H = F, S/^{H) = F and Q/^(^(i/))=F 



Now Lemma A. 2 and Lemma A. 3 can be applied: 



R/ 



a I a 
as^ag 



if Q/H 
if Q/H 
a Q/H 
a Q/H 

a Q/H 
a Q/H 
a Q/H 

{P<Q>{R<iS>W))/H 



w/Ui^m) 



yw/u 



as^aq 



T 

F and S/^{H) = T 

F, S/^{H) = F and Q/H=T 

F, S/^{H) = F and Q/H^F 

T 

F and S/^{H) = T 
F and S/^{H) = F 



Furthermore, we have 



d 



d{P<iQt>iR<iS>{V <iQ> W))) 
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= < 



MmW) ifQ/H = T 

w(M^imiH)))) if Q/H - F, S/i^{H) = F and Q/^{^{H)) = T 
mviM^iiii^m if Q/H = F, S/^iH) = F and Q/^i^(H)) = F 
M^m) if Q/H 

miwsiM^))) iiQ/H^F^ndS/i^{H)^T 
wiwsilk^H))) if Q/H = F, S/^{H) = F and Q/H = T 
ow(zl(?^ W)) if Q/H = F, S/^{H) - F and Q/H = F 
^(^(ff)) iiQ/H = T 

miMmW)) if Q/i? and 5/ ^(i7)=r 
ifO/i^ = J^and5/Jj(i7)=F 



diP<iQ>{R<iSt>W)) 
Hence, by Proposition 2.2, CPS is sound. □ 



B 

Term rewriting system 



B.l Term rewriting for CP 

In this appendix we define a term rewriting system for CP and prove that it is 
convergent. For more information on term rewriting see [(>]. We cah the term 
rewriting system Rfr and it is defined as follows: 

X <T > y ^ X 
X < F > y y 
T <l a; > F — > X 
x<i{y<z>v)>w~^ (x <iy > w) < z > [x <v > w) 



In the following lemma we show that i?/,. is terminating i.e., all terms can 
be reduced to a normal form. Note that this in itself does not guarantee that 
there is a unique normal form for each term. 

Lemma B.l. is terminating. 

Proof. In order to show that Rfr is terminating, we are required to prove that 
an infinite derivation ii — )■ t2 — > — >■ . . . does not exist. First we define the 
norm on terms as follows 

\T\ = 1 
\F\ = 1 

\t<r>s\ = 2\r\ +max{\t\, \s\) 



Subsequently, we show that for each rewrite rule the norm of the left-hand side 
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is strictly greater than the norm of the right-hand side. 

|t<iri>s| =2\T\ + max{\t\,\s\) 
= 2 + max{\t\, \s\) 

> \t\ 

\t<Ft>s\ = 2\F\ + max{\t\, \s\) 
= 2 + max{\t\, \s\) 
>\s\ 

\T<s>F\ = 2\s\+max{\T\,\F\) 
= 2\s\ + 1 

> \s\ 

\t < {r < s t' v) t' w\ = 2\r <st>v\+ max{\t\, \w\) 

= 2{2\s\ + max{\r\, \v\)) + max{\t\, \w\) 

= 4|s| + maa;(2|r|, 2|w|) + max{\t\, 

= 4|s| + max{2\r \ + max{\t\, \w\),2\v\+ max{\t\, \w\)) 

= 4|s| + max{\t <ir>w\, \t <iv >w\) 

> 2\s\ + max{\t <irt>w\,\t<iv>w\) 
= \ {t < r \> w) < s > {t <\v t> w)] 

Consequently, if t — >■ r using these rules, it follows that \t\ > \r\. 

Suppose that there is an infinite rewrite sequence — > ^2 — ^3 — ^ 

Then we know that if i < j, \ti\ > \tj\. Since the norm is always positive and 
finite (we do not allow terms with an infinite number of symbols), this sequence 
must end. Hence, such an infinite rewrite sequence does not exist and Rfr is 
terminating. □ 



The following lemma shows that Rfr is locally confluent. If there is a term 
u mutually derivable from terms s and t, wc write s ^ t and say that s and t are 
joinahle. A binary relation is then locally confluent if for all terms r, s and 
t, if s l-t whenever r — > s and r ^ t. 

In order to prove local confluence, we first need to define the concept of 
critical pair. Let s — > f and u — > ?; bo two rewrite rules with variables renamed 
such that they do not share variables. Furthermore, let n be the most general 
unifier of u and a nonvariable subterm s' of s. A critical pair is then the term 
combined with the term resulting from replacing /i(s') with /Lt(u) in /Lt(s). 
A critical pair M2) is joinable if ui and U2 are joinable. 

Lemma B.2. Rfj. is locally confluent. 

Proof. Rfr is locally confluent if all its critical pairs are joinable (see Lemma 
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5.15 in [ ]). We first rename tire variables in the rules so they are distinct: 

a;i o T i> yi — >■ 

X2 < F l> 2/2 2/2 

T < X3 > F ~> X3 

X4 < {1/4 < Z4 > V4) > ^4 — > {X4 < 2/4 > ^4) <1 Z4 > {X4 < W4 > W4) 

Then we identify the critical pairs and check whether they are joinable. 

• Let /ii be a substitution such that 

f^iivd = Xl 
^il{z4) = T 
f^i{v4) = yi 

and the rest of the variables map to themselves e.g., /ii(xi) — Xi and 
fj,i{x4) — X4. Then we have the following critical pair 

{^l{x4 <iXi> W4), ^ii{{x4 <1 2/4 > W4) < Z4 t> {X4 < W4 > W4))) 

which is joinable 

IJ,l{{x4 < 2/4 1> W4) < Z4t> {X4 < W4 > W4)) — {X4 <lXi> W4) <T t> {X4 < 2/1 ^ ^4) 

X4 < Xl t> W4 

= ^i{x4 <i a;i > u'4) 

• Let /X2 be a substitution such that 

A*2(2/4) = X2 

^^2(24) = F 
f^2{v4) = 2/2 

and the rest of the variables map to themselves. Then we have the follow- 
ing critical pair 

imixi 2/2 >W4), ^2((a;4 O 2/4 > Wi) <Z4t> {X4 <V4> ?«4))) 

which is joinable 

^J'2{{x^ <1 2/4 l> W4) < Z4> {X4 <V4> W4)) = {X4 < X2 > W4) < F \> {X4 < 2/2 > W4) 

X4<y2>W4 
= ^J.2{x4<y2>W4) 

• Let /X3 be a substitution such that 

^^3(^4) = 2:3 
M3(w4) = F 
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and the rest of the variables map to themselves. Then we have the follow- 
ing critical pair 

{l-l3{X4, < Xs > W4), H3{{X4 <1 J/4 > W4) <Z4> {X4 <V4> W4))) 

which is joinable 

A*3((a^4 < 2/4 [> W4) <iZ4> {X4 <iV4> W4)) = {X4 < T > W4) < X3 > {X4 <F> W4) 

X4<Xs> {X4 <F\> 'W4) 
X4<X3>IU4 
= IJ.3{X4<X3>W4) 

• Let /i4 be a substitution such that 

Mxi) = T 

fl4{X3) = T 

tJ-iiVi) = F 

and the rest of the variables map to themselves. Then we have the follow- 
ing critical pair 

(T, T) 

which is joinable. 

• Let /U5 be a substitution such that 

^^5{X2) = T 

H5{xs) = F 
^5(2/2) = F 

and the rest of the variables map to themselves. Then we have the follow- 
ing critical pair 

{F, F) 

which is joinable. 

• Let /Lt6 be a substitution such that 

M6(a;3) = yi<iZ4>V4 
fieixi) = T 
IJ-e{w4) = F 

and the rest of the variables map to themselves. Then we have the follow- 
ing critical pair 

(^6(2:3), At6((a;4 <l2/4 I>'U'4) <1Z4\> {X4<1V4 > W4))) 
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which is joinable 

fieii^i <i J/4 > W4) <i Z4 [> {x4 < ti4 > W4)) = {T < 1/4 > F) < Z4 > {T < t> F) 

y4 < Z4 > {T < V4 t> F) 

y4<i Z4>V4 

• The last critical pair requires that we rename the variables in the fourth 
rule a second time 

X4 <: (2/4 < Z4 > v'4) >W4^ {x'4 <i 2/4 > W4) <: Z4 > {x'4 <V4> W4) 

Let /iy be a substitution such that 

^7(2/4) = 2^4 

/i7(z4) = y4<]2:4^^^4 
^7(1)4) = u;^ 

and the rest of the variables map to themselves. Then we have the follow- 
ing critical pair 

{fi7{x4<i{{x'4<y4t>w'4)<iZ4t>{x'4<iV4i>W4))t>W4), flri{x4<iy4{>W4)<lZ4{>{x4<lV4>W4))) 

which is joinable 

fJ,7{{x4 <1 1/4 > W4) O Z4 (0:4 < W4 > ^4)) 

= {X4 < 0:4 > W4) < (2/4 O Z4 I> 114) t> {X4 <w'4> W4) 
X4<i {x'4 < {y'4 < Z4 > v'4) > U'4) > W4 

^ 2:4 < {{x'4 <iy'4> w'4) <i Z4 > (3:4 <i ?J4 t> w'4)) > W4 
= ^i7{x4 < {{x'4 < 2/4 t> W4) < Z4 > (a;4 < 114 > W4)) > W4) 

Since every critical pair is joinable, the rewrite system Rfr is locally confluent. 

□ 

By Lemma 5.13 (the so called Diamond Lemma, see [ .]) in [('<], a terminating 
binary relation is Church- Rosscr iff it is locally confluent. Hence, Rfr is Church- 
Rosser. Furthermore, by Theorem 5.4 in [ ] a binary relation is confluent iff it 
is Church- Rosser. Consequently, Rfr is also confluent, which leads us to the 
final theorem. 

Theorem B.3. Rfr is convergent. 

Proof. By Definition 5.6 in [ ]. □ 

This means that term rewriting system Rfr has unique normal forms. In 
the next section, we list a program that uses this result to determine whether 
two terms are provably equal in CP. 
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B.2 Theorem prover for CP 

In this section we list the code of a small theorem prover for CP based on the 
term-rewriting system Rfr in the previous section. The program is written in 
Prolog, and has been tested in the SWI-Prolog interpreter. 

Within the program we use 1 and to denote T and F, respectively. Atomic 
propositions have the same notation i.e. atomic proposition a is represented by 
a. Conditional composition is represented as a three-place predicate c (_,_,_) 
in which the middle argument is the antecedent and the first and third argument 
are the left- and right-consequent, respectively. So, for example, the term a < 
(T < 6 > c) [> F is represented by the term c (a, c(l, b, c) , 0). 

After loading the program in the Prolog interpreter we can check whether 
two terms are equal as follows: 

-? equals (Terml , Term2) . 

where you should replace Terml and Term2 with two terms using the notation 
we just discussed. The equals predicate will compute the normal form of each 
term and determine if they are equal or not. 

In the code below we see several other predicates. We now give a short 
description of each of these predicates. 

The rule predicate describes the term rewriting rules i.e., in this case the 
rules of Rfr- 

The normal_f orm(+Term, -NormalForm) predicate computes the normal 
form NormalForm of the term Term. 

The subterm(-Subterm, +Term) predicate returns a subterm Subterm of 
the term Term. 

The substitute (+Subterml , +Subterm2, +Terml, -Term2) predicate re- 
places all occurrences of Subterml in Terml with Subterm2, and returns the 
resulting term as Term2. 

rule(c(X, 1, _), X). 
rule(c(_, 0, Y), Y) . 
rule(c(l, X, 0), X). 

rule(c(X, c(Y, Z, U) , V), c(c(X, Y, V), Z, c(X, U, V))). 

normal_f orm(Term, Term) :- 

findall (Subterm, subterm(Subterm, Term), Subterms) , 

forall (member (X, Subterms), \+ rule(X, _)). 
normal_form (Terml , NormalForm) :- 

subterm (Subterml , Terml), 

rule (Subterml , Subterm2) , 

substitute (Subterml , Subterm2, Terml, Term2) , 
normal_f orm(Term2, NormalForm). 

subterm (T, T) . 
subterm(Tl, T2) :- 

T2 = . . [_ I T] , 

member (T3, T) , 

subterm(Tl, T3) . 
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substitute (Terml , Term2, Terml , Term2) :- !. 
substitute (_, Term, Term) :- 

Term \= c(_,_,_) . 
substitute (Terml, Term2, c(X, Y, Z) , c(NewX, MewY, NewZ)) :- 

substitute (Terml, Term2, X, NewX) , 

substitute (Terml, Term2, Y, NewY) , 

substitute (Terml, Term2, Z, NewZ). 

equaKTerml, Term2) :- 

normal_f orm(Terml , NormalForm) , 
normal_f orm(Term2, NormalForm). 
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